c81e5ba934d60e5833454a379c3320c5 | Triage

Sharing

General

Target

c81e5ba934d60e5833454a379c3320c5
Size

5.5MB
MD5

c81e5ba934d60e5833454a379c3320c5
SHA1

822defc83fed16e2c5c6a0e6d9c3913e1889251d
SHA256

71656599a57ece3c118ac2ff94881300367a0a0011ca6cf5a8f2f72ab1c9872f
SHA512

600f58db6e552207ee08a4ffe1b84444489ed5b703af8f0d434a0b76464a9782714c308e6c41b68426748334175e02466c23b7245dfdf8b22c118912b279fcdb
SSDEEP

98304:aFL1U/MIkAAkMlIgbD+DhHrfqGnUDkLJvhgGljhDOlz/HCY:aZS/xkxkcTD+DFrfZbJvhgehUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c81e5ba934d60e5833454a379c3320c5

Files

c81e5ba934d60e5833454a379c3320c5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\source\csgo-wpf\Client\obj\Debug\Client.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ