d4f3338798a7dce153554a64043b3443 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4f3338798a7dce153554a64043b3443
Size

912KB
MD5

d4f3338798a7dce153554a64043b3443
SHA1

41da77e87485b27f1e0434f8c4cfbcc3d48ea3e9
SHA256

bc29547bd011de560a099d907c010807e4a0f03bfb076bed41f176ea129aa034
SHA512

c60c173a812828ced555fdce267797a757a187b6b1971c07cae3157a0aae9277232de7ccb8820c72a5e7fb5e37471f95e2aaa953d4fd43d732a452b20f1bff59
SSDEEP

12288:7MhXQejFX4VxpFreQf28v28aXj3IYjuug6vkHEJeLdzHhqAqjD:YSejJIvH+8O8aXj4YNHud1dqj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4f3338798a7dce153554a64043b3443

Files

d4f3338798a7dce153554a64043b3443
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Bruno\source\repos\RocketBit\RocketBit\obj\Debug\RocketBit.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ