d4a8c55badae214db941393f9c37f5f7 | Triage

Sharing

General

Target

d4a8c55badae214db941393f9c37f5f7
Size

4.2MB
MD5

d4a8c55badae214db941393f9c37f5f7
SHA1

7dff089b12fb848924b1f7092fb0d95a373c027c
SHA256

b53cbddc829a3ebca8df6cb546ef9f22ac3a7eac5e5c997ce4cceee9d237a8d9
SHA512

12b95ee5f9faae449c0d8d8980398fd271e0cfa6954c81c02ccad97e11e4e5e4a08463f95df2b5c411e4884bf40ccea71f51b10a89f4da10837cc9804bad4f6a
SSDEEP

98304:Q0T+SrpNM+Ldi5e/w9xB7hKb7Qq/uLO5H1y:zfjM8diYw9o/Qudi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a8c55badae214db941393f9c37f5f7

Files

d4a8c55badae214db941393f9c37f5f7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Stan\source\repos\KSBuilder\KSBuilder\obj\Debug\KSBuilder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ