2df8a22b31c43b1185f4bfad9010b832fc5c49a300cc8adf55bf32f2ca92209d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2df8a22b31c43b1185f4bfad9010b832fc5c49a300cc8adf55bf32f2ca92209d
Size

640KB
MD5

53ec19fb20d57688cf7dfd1d30d72b96
SHA1

36552707076c130ce632e84b914f7d8bb94848ff
SHA256

2df8a22b31c43b1185f4bfad9010b832fc5c49a300cc8adf55bf32f2ca92209d
SHA512

92f1582af3d1c94f00c305eea1fcedce011d6dc004898d08ef13859bd94375f5b1d56f609f8c6f7ddc590967f295dcb1e1ea68f4ab69ca2276d1aa88c2aaa394
SSDEEP

12288:W5RUxWugoRDJbJbIik7BwzZzLtaky/N6/uaQw9RevZCKSsfEigy3g:W/4WziVRZsuzZH33QwqxCK1fEF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2df8a22b31c43b1185f4bfad9010b832fc5c49a300cc8adf55bf32f2ca92209d

Files

2df8a22b31c43b1185f4bfad9010b832fc5c49a300cc8adf55bf32f2ca92209d
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\CoffeeToYaraAndJoeSandbox\obj\Release\CoffeeToYaraAndJoeSandbox.pdb

Sections

.text
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ