b944082c365388ec885a5139e74f55cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b944082c365388ec885a5139e74f55cf
Size

901KB
MD5

b944082c365388ec885a5139e74f55cf
SHA1

782af3475249b2ac897aaa88a17ee137d0d32862
SHA256

224135be5dfcbe2cdafc62f7d929f8539347981c74b9a8edf170b98b3a0a31ba
SHA512

97dc7ce22e7b4a170e6cee860aaf75e9bd35ffd384dacfd6e855cc4cba9fb05a1bac0f7113906517068211547721cfac403cfd068ef12533e9b2e36cd98e0a13
SSDEEP

12288:8jC6VOlIKhlwU/4YLvBjC6VOlPlBjC6VOlIKhlwU/4YLv:5bIsLv8bPl8bIsL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b944082c365388ec885a5139e74f55cf

Files

b944082c365388ec885a5139e74f55cf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\_Bld\10657\7994\Sources\obj\Win32\Release\EvaluationContainer.NetFX40.csproj\Microsoft.Mashup.Container.NetFX40.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ