de527c6c305020549f8f88eb2b5f1936 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de527c6c305020549f8f88eb2b5f1936
Size

175KB
MD5

de527c6c305020549f8f88eb2b5f1936
SHA1

62a35f02b4d2cd40109f382c7d0fd00c67a1285f
SHA256

6f55ee055fc53f2f0f6a6feddd61d451e5c0d8eef33fcf8bd487dcf190da8394
SHA512

3ef701ed3a949a6829a9a9fc3919fe7b7c449103eff5747f1e3355b0a967caa6fb99ab94aa5408be61551b6e685030269de54613777823baa7702ead9828fdca
SSDEEP

3072:IiXXea8FNlVYFyK2wGPjWfQj86IIFTRdea84bcY:jfcdYF2hjbZIKVdfvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de527c6c305020549f8f88eb2b5f1936

Files

de527c6c305020549f8f88eb2b5f1936
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\builds\OneUp.ccc_-_Cheat\OneUp.ccc_-_Cheat\OneUp.ccc - Cheat\obj\Release\OneUpSpoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ