dee65c4efaff90e08cf259a1e337831d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dee65c4efaff90e08cf259a1e337831d
Size

452KB
MD5

dee65c4efaff90e08cf259a1e337831d
SHA1

93483d1c688c106c63755cd8f8cee1c7e8abff20
SHA256

41bd5a3c2c7a3d7fd595feeb463df40f47938c89b0493925024bd8bae5fa1a20
SHA512

e287ef3a76ced16b89c9265fae740d5214139f0d14f62c78f3b3e757b8ea2c814a476fb577cd3395b56380128dbc1ab6071f305fce7975c14150361cc9493285
SSDEEP

3072:Cts/jWypwNiaN9HUr2IZScULjYlt3nRxRgkosO:CObxwUaDHA8LjYH3RnZos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dee65c4efaff90e08cf259a1e337831d

Files

dee65c4efaff90e08cf259a1e337831d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\rstan\source\repos\ivan\ivan\obj\Debug\windows.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ