cdff440cfc55e8edd2b89dd1576a790b | Triage

Sharing

General

Target

cdff440cfc55e8edd2b89dd1576a790b
Size

5KB
MD5

cdff440cfc55e8edd2b89dd1576a790b
SHA1

828b669834f59f3e661352e9811f9c1b921eb49e
SHA256

8c97f3a8c7bfc48bae95f45bafceb45d3e54ec62bf4f5f15b46e0ce1056a4fa6
SHA512

454256a208054c005bef9e391649fd49e70419cf89b30b4076cbf3c4dc74c9fe1fdfb79fe80362e0647ac285252b4dc6dfbb6ae483c22856978e8da70a1b37d4
SSDEEP

96:Nffef6EO5+fEKh7LGielYsFtX8xDVlBzNt:VcOw5LSmsFN8xDVlD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdff440cfc55e8edd2b89dd1576a790b

Files

cdff440cfc55e8edd2b89dd1576a790b
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Jota_\source\repos\Av-Bypass-book\Av-Bypass-book\obj\x64\Debug\Av-Bypass-book.pdb

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ