c96f80a8a863e4d17e2d1ee691cbc44a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c96f80a8a863e4d17e2d1ee691cbc44a
Size

524KB
MD5

c96f80a8a863e4d17e2d1ee691cbc44a
SHA1

2135464fa2fd923b2aa3ac5e5016907e95959877
SHA256

e0e9d4dd8033cec386f5363f404cb14528e4b1e69ad594fabc6cf79b8c580941
SHA512

e129dd2af73b6f84803a15a37f5b4b3922c154b0fc7eff2c7c239e12b60b878ffc8875c05b1f8225e12ae8f5e302d02f85d7bb30670c11b4ddd70b1d4df8f7f4
SSDEEP

12288:vkB2oUSEP4IPEj4DHhVyXrSSx6+QghEVcIm:PoUSq4IPiaBV2mX+QFSIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c96f80a8a863e4d17e2d1ee691cbc44a

Files

c96f80a8a863e4d17e2d1ee691cbc44a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Current Crypters\2012\Services\Services\obj\x86\Release\Services.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ