bd345070b2180ea46238817ade190211 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd345070b2180ea46238817ade190211
Size

11KB
MD5

bd345070b2180ea46238817ade190211
SHA1

9cce1dac83fdd5449f95ed236e13b67d9d837473
SHA256

b411c3b369ac4fc5a4c2a417b388b85e1194f309c39f12f419d08f4529bca181
SHA512

935d9ebc634166139fb7f2bdbdf4296336d9c401e027fb2dd2d1029112ffc3b2c2dd63f0efa3a3111a787df7fcac81a78730ee88126b704a5ed21e49359a97bc
SSDEEP

192:aZ9cFGJKn/90EO7Y2TpQgatNUDOeQfwZ9JCZkZiDPu:aDcE42Vs2TOgatN8QfjZ1DP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd345070b2180ea46238817ade190211

Files

bd345070b2180ea46238817ade190211
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Desktop\token\토큰\slok\obj\x64\Release\Rdsdc.pdb

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ