be1f82f5e7971027696b7884f547ba2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be1f82f5e7971027696b7884f547ba2d
Size

8.2MB
MD5

be1f82f5e7971027696b7884f547ba2d
SHA1

97114a6f673e1f519f8d528037a915fa388e7c68
SHA256

2fc4c2e47bc427d1bae38f6eca380d6221067a826ac9833b2a1dc6c9a86989be
SHA512

f114f16a43b230be05d264fdb89dfdd20d48bbe6ad4f19633f99954d43a56f6b9998c9ffbcf4d42e7c49a5b4dbb6820d195d748bc912ec9de55635e93c3e6db7
SSDEEP

196608:sPFloFHG5Gzmw3h2tIQctDXWjOcTBTe+rFlbE7rFlY1cjoo:sKGkzj3hYIDdXTMle+rfA7nY1cM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be1f82f5e7971027696b7884f547ba2d

Files

be1f82f5e7971027696b7884f547ba2d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Klaus\Documents\Source\GFAlarm\GFAlarm\obj\Release\GFAlarm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.1MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ