d5abd40b6d5cb90a0629fbf15187b434 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5abd40b6d5cb90a0629fbf15187b434
Size

15KB
MD5

d5abd40b6d5cb90a0629fbf15187b434
SHA1

d298601ad83411f2f4fa9af73099decd5478e694
SHA256

e0c0f289873bc9e36946af61c4eb483d9af026f765ab779c7cc05956dcfd5c07
SHA512

9c1fa87281b2186ef571116631771dedfa401ecc85eb406cbf0cacf5486869ea0b7b1fb5b5a7ce225281680bc9d8fac43038aa691aed6dd3f0d70b77d0d69923
SSDEEP

192:1oDyNib/u9Xyt41CvzEXv9OYn4Zmy2nloYk4SNIWLR/8C66aWIX4:1oHbm9Ct40vw1hI574CvLRUC66aWII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5abd40b6d5cb90a0629fbf15187b434

Files

d5abd40b6d5cb90a0629fbf15187b434
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\t0fx\dev\VBnet\uTorrentSeeder\TorrentSeeder\ca\obj\Debug\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ