b89fe4ea3198adf2cf71d31585b4dc11f2b428ee521e69304e7e734f13fdf297 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b89fe4ea3198adf2cf71d31585b4dc11f2b428ee521e69304e7e734f13fdf297
Size

34KB
MD5

45abed52e076332cc25d77c846181dd6
SHA1

0495c5dce69dc15a09842538136381bb27b55309
SHA256

b89fe4ea3198adf2cf71d31585b4dc11f2b428ee521e69304e7e734f13fdf297
SHA512

0ddec0e007907695033eeba3a58e5285770a647cf327735ea19affbb2156b52da71b25b5ced749630f0b8879401f560c405fe7425764e5d90786862cc611094e
SSDEEP

384:sEPuSxMqfXDPLEoe6w8qenTFzjAfOqohuM9rOBBzcbRyaZwT3XKUqtKZf0j:3B+qcJ6wZyTFzjmOm8dR5wTaU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b89fe4ea3198adf2cf71d31585b4dc11f2b428ee521e69304e7e734f13fdf297

Files

b89fe4ea3198adf2cf71d31585b4dc11f2b428ee521e69304e7e734f13fdf297
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hg\VX\PersonnelGraft\Windows\obj\x86\Debug\Shell.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ