ba192a7a8a4b12367925f3749423bd20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba192a7a8a4b12367925f3749423bd20
Size

93KB
MD5

ba192a7a8a4b12367925f3749423bd20
SHA1

7ffcec7a13077401f27d3b07bb31a15c3c20059e
SHA256

9b29b12058434556ae532941544a2e2ab58bfbb4e7fcbc809d31313294ca9f78
SHA512

0e114f51ca301b2441ff975c40d035a6f943116fa897fb23d03cd52b9de90b9ccf172383442da3c6d17bf62eba2d442618e7249965cb1ecb56956244b94af269
SSDEEP

1536:laFm42P8W2/JxWia0QRQEyrYunOwQ7+Mpax96yk8ICLur8uk3mmFSGXMNvQOMDpE:w0tX4JUJjuEyrYxwQiMpaSyxLik3YGXC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba192a7a8a4b12367925f3749423bd20

Files

ba192a7a8a4b12367925f3749423bd20
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Hercules\source\repos\Patch\Patch\obj\Debug\Patch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ