d039d1c70c5f853549ff7833879d0a3c45e0f77172d739f884bca39308a5c2f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d039d1c70c5f853549ff7833879d0a3c45e0f77172d739f884bca39308a5c2f0
Size

644KB
MD5

5713356f6b86169b25baefa8a89d2629
SHA1

18e57bbb578efa152da7ee08b762b75224a85a75
SHA256

d039d1c70c5f853549ff7833879d0a3c45e0f77172d739f884bca39308a5c2f0
SHA512

44c795fc7cf11318cb5c92746a6bd6d4ec9912330e26ce306f93faf9a24606c4b306a9e9412e5b37084dee1fa32b7f9a0e524cdef938b6a80a5519c55891eaba
SSDEEP

12288:l7RWZhpEmcKpiiTDIaM0Cn0KCupJEwLwd8iKoIKg3gC:58SmcKsWDZM0bMnEGwpDg3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d039d1c70c5f853549ff7833879d0a3c45e0f77172d739f884bca39308a5c2f0

Files

d039d1c70c5f853549ff7833879d0a3c45e0f77172d739f884bca39308a5c2f0
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\CoffeeToYaraAndJoeSandbox\obj\Release\CoffeeToYaraAndJoeSandbox.pdb

Sections

.text
Size: 629KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ