b9dbcd64be39f41c571f8e7e6132044d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9dbcd64be39f41c571f8e7e6132044d
Size

835KB
MD5

b9dbcd64be39f41c571f8e7e6132044d
SHA1

e7ca09b850ffc938f34f27d1608bcbd833806638
SHA256

96c23740bb1c00baf1fb348262e03095c7a0f186b0614b488a9054ce2c754c76
SHA512

0b85ddc837fdcea9abb75ec93511d6f288607ce00470a06a695401ea4ae7af2ee5b856d9abf91a26794876f9bb3e618a23c3df8346ab855846e086fa7152773e
SSDEEP

24576:j8O/dG5kEyvpwyTaTp86QsDsIdN+0OA4a:PTG7VIS+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dbcd64be39f41c571f8e7e6132044d

Files

b9dbcd64be39f41c571f8e7e6132044d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\smoke\Desktop\Crypt\MSI\MSI Afterburner\bin\Release\Secured\FameliNasohek2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 749KB - Virtual size: 749KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ