cca35bdf34a1189df658fb85644e3018 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cca35bdf34a1189df658fb85644e3018
Size

282KB
MD5

cca35bdf34a1189df658fb85644e3018
SHA1

9ea4c22e7efe4f03402b5f1e87b1c5d0b2f259c3
SHA256

23d7f00fee740a335e28ebd95857bea89677855c5229002291ca319d88927deb
SHA512

64a966c71545ff3dab8852ed231b75b434f5d07aa1f4b1e79b47165406c95ab9a7f88e47fb46007fce7246b878555e727440cbb20961f0e0de85e9ed62de4dd0
SSDEEP

6144:Z9UVa4yAsx+kQaAG4LLqzaxEHX+qt7t7PfKp:DUg+VbNSzax+X++k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cca35bdf34a1189df658fb85644e3018

Files

cca35bdf34a1189df658fb85644e3018
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Owner\Desktop\Swix\WinformExample\obj\Debug\Loader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ