b8de473d1cba8606e29e30ce473df98a | Triage

Sharing

General

Target

b8de473d1cba8606e29e30ce473df98a
Size

2.2MB
MD5

b8de473d1cba8606e29e30ce473df98a
SHA1

0ac0aa8bbc32bde4be9aa063e0a128251ea003b1
SHA256

ec7394b94671940183eaa2f5a36829694e46604a2218e87b330b0754a6a6e0bc
SHA512

ac989dca2b93487a40e6f61b139f4a267833baab88a8c518b35f03dab7558f1c23a912b52c307a6060f2fdf58a5d311143308fe62bfd9ea83d7291ae1046b981
SSDEEP

49152:oLrZ6SU6wmIe3GuBt7YC9J6Ab4AWHdNbPmDuY8XmQulyx811:ArESUmI6GRMJD4Tj7Y83yd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8de473d1cba8606e29e30ce473df98a

Files

b8de473d1cba8606e29e30ce473df98a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SoftwareRG\Desktop\MuOnline\Sources en General\Launcher NEW\Launcher PREMIUM sin custom\Installer PREMIUM\Installer PREMIUM\bin\Debug\CryptoObfuscator_Output\Installer PREMIUM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ