d60ac75f4a2a5e8fff704a13c53372c9a33b533626a96c5398ad7727ff25dc81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d60ac75f4a2a5e8fff704a13c53372c9a33b533626a96c5398ad7727ff25dc81
Size

34KB
MD5

19c2238b0380e82d0ff50a77a0c24a8a
SHA1

1f85f97f5b5d2364791f4845d0d9177a7fb29d8f
SHA256

d60ac75f4a2a5e8fff704a13c53372c9a33b533626a96c5398ad7727ff25dc81
SHA512

05e829a46445476230f5abdc98faf44e1ff53f34abe74c3dc155205522ddfae2a492ceab34a24d101b2308b2d24b06e60392d6e94b8f10ef771386e6f7427018
SSDEEP

384:jEPuSxMqfXDPLCoerw8qenTFzjAfOqohuM9rOBBzcbRyaZwT3XKUqtKZf0j:mB+qqJrwZyTFzjmOm8dR5wTaU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60ac75f4a2a5e8fff704a13c53372c9a33b533626a96c5398ad7727ff25dc81

Files

d60ac75f4a2a5e8fff704a13c53372c9a33b533626a96c5398ad7727ff25dc81
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Hg\FinancialsTest-Alloy\Windows\obj\x86\Debug\Shell.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ