c689f49eab0f52d0629fb8c260694034 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c689f49eab0f52d0629fb8c260694034
Size

91KB
MD5

c689f49eab0f52d0629fb8c260694034
SHA1

86259d4fd43f5ee746324c8aade7268b43ea2ee4
SHA256

99f97a7659adff217eddb1ccdbb4c4fb6aa00429beeba5d6692596f168bb0235
SHA512

26d41acf1c747c0a35d500d095cb2483725d018afcac10604ba76c4a79f0af5fc8e6916fff6599de4a1bfdc3670de15214a3e04f6f68375d024d316c80e40b4b
SSDEEP

1536:9XX7KwB/qNeM255731vd8Q0vL3Ksfnqogat0CRhU5RZJn:9bFZfFvuD9OSSF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c689f49eab0f52d0629fb8c260694034

Files

c689f49eab0f52d0629fb8c260694034
.exe windows:4 windows

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\sami\documents\visual studio 2015\Projects\new2019.txt\new2019.txt\obj\Debug\new2019.txt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ