da434ebbcedd9333f98852593175538e4bba4a3e6193e27530f034be68a6b564 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da434ebbcedd9333f98852593175538e4bba4a3e6193e27530f034be68a6b564
Size

7KB
MD5

b0e89675e3e09d4024afa92ecc2c8cc8
SHA1

25a06b2038cb3cce6b8ce525496dd83706983a40
SHA256

da434ebbcedd9333f98852593175538e4bba4a3e6193e27530f034be68a6b564
SHA512

00d24e72d4fd5f03ed99c838780a1872085e5e002f6b5b08a97819f07fd8e150d59bd0a22f51bef40fdd691a5c3727846c2c0103b60a5f894e8b14d3752cc82a
SSDEEP

96:CEnsiRdqkjUeEzYqyFAgI/I+mzYx5OFfUIpWEPqP6v2iMwpKnUTqcUzNt:CEsiRdqoUe0YRugiI1YcciBKn4te

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da434ebbcedd9333f98852593175538e4bba4a3e6193e27530f034be68a6b564

Files

da434ebbcedd9333f98852593175538e4bba4a3e6193e27530f034be68a6b564
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Marcus\Documents\Visual Studio 2015\Projects\DrunkPC\obj\Debug\DrunkPC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ