dfd446df8d5951a2f84b6690fcd12387 | Triage

Sharing

General

Target

dfd446df8d5951a2f84b6690fcd12387
Size

8KB
MD5

dfd446df8d5951a2f84b6690fcd12387
SHA1

ed6ba40bda0e48cfa6cf37f5a1b812ac03b84860
SHA256

51d2635f22730bda39c675471c27488968ec29cdab13cf86ab060888f94e9d99
SHA512

c9cc19e77dd7bfa897de18cbddb71ec26536fc4d7ed1415740444b7c1afef34b3a99c4cf93124317e9f8866c2aa87e899c03110dc2e1514e5c13616df90180b6
SSDEEP

96:9X0/V1Ip2w7Is6IlqBytLr9yLFMsyRekL3LWzv/JBl4K2PTrpw4l/bLIHAzNt:yI3J5l0ILrYL690kL3LI3Tl4K2rm4Nb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfd446df8d5951a2f84b6690fcd12387

Files

dfd446df8d5951a2f84b6690fcd12387
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\HOME\AppData\Roaming\Cyber_Crypter5\obj\Debug\WindowsFormsApplication49.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ