dfaa8445f6b0498288bbcfe749e0bc2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfaa8445f6b0498288bbcfe749e0bc2e
Size

18KB
MD5

dfaa8445f6b0498288bbcfe749e0bc2e
SHA1

121a32f02aa01321c3d2d85b5934752c8b55baf1
SHA256

2bb546c7e5f11378cc9f51848af43130ca7dba9f8cc93046d5ab7be1ce2ebc43
SHA512

78f61f3430e54224daa1b6d1a3d112ac102d3ccb01801713f5de01d2940635633effd6453c957a9e3e769462f86dfd86964ddc5352b3ea96e9935c8c4f1fbd40
SSDEEP

384:8OoXKgLoShHybzsjbRy6yDQTc14Ijm7hSDwnSxLL:OKgL14bzSTTcbx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfaa8445f6b0498288bbcfe749e0bc2e

Files

dfaa8445f6b0498288bbcfe749e0bc2e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\VIRUS\VICONECT\viconect\viconect\obj\Debug\viconect.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ