89a90617d21885c67f6fdde140e4ab5d78d255f2f1b80a97b2d054f95267fb65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89a90617d21885c67f6fdde140e4ab5d78d255f2f1b80a97b2d054f95267fb65
Size

9KB
MD5

05a85bb7756c121a845ed842f5b348ae
SHA1

8913aa3942af7da9cfb91ee2a898aa5d3c5c7f4a
SHA256

89a90617d21885c67f6fdde140e4ab5d78d255f2f1b80a97b2d054f95267fb65
SHA512

0e4ba77a4d4a8b97397b50d86798965bf76b94893376cb83bad52e8c19441c4ba4adb8850248dbff27a4b3f0b23b7ff4fb3f2a0516c31418702b6ce10ce86c57
SSDEEP

96:Gl2cEhJXN1rNhOigjVVJWt////nCYvBdJ/yhsbiU9wF17pC2u+zNt:QEhJd1HOZjVVINCYvBT/yhsF9whSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a90617d21885c67f6fdde140e4ab5d78d255f2f1b80a97b2d054f95267fb65

Files

89a90617d21885c67f6fdde140e4ab5d78d255f2f1b80a97b2d054f95267fb65
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\C#主程序\ConsoleApp1\obj\Release\wAnspp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ