8e680a92f18c335a8c89d1d5c5f75bd46f0d24d43debfd0e0981c37642045964 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e680a92f18c335a8c89d1d5c5f75bd46f0d24d43debfd0e0981c37642045964
Size

12KB
MD5

c12e11b3765bc26bc211dacbe2f09eb8
SHA1

18cb2358cb406e5dab44461fc5a4f786cba342e2
SHA256

8e680a92f18c335a8c89d1d5c5f75bd46f0d24d43debfd0e0981c37642045964
SHA512

1ac75955f0692fbae1e405c8ee76abafd5097709bfc9d922d6126c744829852fe2abf4375f05534fa0e5685e896d9d260fdb4c79f560241c83d754518e2ff029
SSDEEP

384:uK+q4kSI/XVyxEGHD3L0YaKoH+zc3ZX9bH:kK9Ets5ZlH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e680a92f18c335a8c89d1d5c5f75bd46f0d24d43debfd0e0981c37642045964

Files

8e680a92f18c335a8c89d1d5c5f75bd46f0d24d43debfd0e0981c37642045964
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Build ZP4\BuildProjects\ZP5\2. Locales\EN\BaseMonitor\obj\x86\Release\BaseMonitor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ