c7797910cbfc0e88ab6dfd3175e127aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7797910cbfc0e88ab6dfd3175e127aa
Size

6.0MB
MD5

c7797910cbfc0e88ab6dfd3175e127aa
SHA1

39717fa1967ffedd03ba0356506f27f8eac77c57
SHA256

8073c81f0ea8be150075efb6123248e10a8118e186438a44b1d1e722c5966c44
SHA512

7c32c9fcb2bceff8aaf508c7a27a2c7750f64c0e9e51bde47d493963942aa3cd46c3c63e9a03d32fbe7f7a33dcded4956b99af16d014bdbf2b60973df18b28e8
SSDEEP

98304:UVuDMQSPBQKzIUrgKISmZH7OfPG8WsY8/poIO/wxUpJT+uRSBJfjDJVL0:UVCSBT0KISQH741YYfO/wxjvB3JVL0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7797910cbfc0e88ab6dfd3175e127aa

Files

c7797910cbfc0e88ab6dfd3175e127aa
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dink\Documents\HejMonika\HejMonika\obj\x86\Release\HejMonika.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ