013288d86412f1ab6839deb1562ec98ba6dad27e0e847a1a7b5526a7737a62d7 | Triage

Sharing

General

Target

013288d86412f1ab6839deb1562ec98ba6dad27e0e847a1a7b5526a7737a62d7
Size

620KB
MD5

6aff7fae411e1e1f8619f554512d6c91
SHA1

66970f2a85c3c2fbf27b8fd85ffa6089eceaeabc
SHA256

013288d86412f1ab6839deb1562ec98ba6dad27e0e847a1a7b5526a7737a62d7
SHA512

aebbec988c1f18701707b693a7bc88aac612c1610edb8809e65737297c487572986523edd2cde5dc6524f4c7476da06bbb6350dccfd881c4df8b6790d97231be
SSDEEP

12288:3YFP0VEOR1PSrJJ1KkEGzcQVfukwgjPaxi10YtFnnL7Wu/NkDqD:3WO3SrJJ1pXVfuOiKJW0P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
013288d86412f1ab6839deb1562ec98ba6dad27e0e847a1a7b5526a7737a62d7

Files

013288d86412f1ab6839deb1562ec98ba6dad27e0e847a1a7b5526a7737a62d7
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\Fallkyriya\obj\Release\Fallkyriya.pdb

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ