d923718562f16afe8a07f96690b87d0b053c08756bf7cc54ae5266997bf6954e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d923718562f16afe8a07f96690b87d0b053c08756bf7cc54ae5266997bf6954e
Size

307KB
MD5

9d4f69c07717ad49800f66c60f32ff3a
SHA1

626bd2952dd805c43ee8a8651efd3d50eed5afbf
SHA256

d923718562f16afe8a07f96690b87d0b053c08756bf7cc54ae5266997bf6954e
SHA512

2ccba9b7c4f1aef4fefcdf250d7721f18f08a3e61fb69b8e7d4a6598cd6c911fff97097ecef2bb79e607c30aaee31cd2f9dbb4c4b36752db8648b458d37bae74
SSDEEP

6144:fH+ukuXqDw1hSXP0xaNle8zsfhZIKFKN8pmD:B7G5Pe8zsFg84D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d923718562f16afe8a07f96690b87d0b053c08756bf7cc54ae5266997bf6954e

Files

d923718562f16afe8a07f96690b87d0b053c08756bf7cc54ae5266997bf6954e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projects\VB.NET\MEGA VIRUS MAKER\Backup (MVM)\Last known works DO NOT USE JUST COPY AND USE\Application (MVM STUB)\Application\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ