79104f2212d939e0db3d8fd502f016face67093a5aecbf628afd4ea01438af87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79104f2212d939e0db3d8fd502f016face67093a5aecbf628afd4ea01438af87
Size

619KB
MD5

87b0656c8246c59b9b2a1ac62253888e
SHA1

4e0f5fd506aedfb3b7b5cede219c23330a1c08b8
SHA256

79104f2212d939e0db3d8fd502f016face67093a5aecbf628afd4ea01438af87
SHA512

f0fa0b862d523f6ff20687a3ed1968dc2945e0f84a64aeb7e40b99fa87de234b4732fafd20040f25597810be16ec4423ff347f3d056dbe74b5bb7809004a20ac
SSDEEP

12288:TPFwIS3raUFI118vEzIVWC+J6oHAD1WGrbi8c3md2xtS:Ts3raUFI1188RC+64smb3md2x0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79104f2212d939e0db3d8fd502f016face67093a5aecbf628afd4ea01438af87

Files

79104f2212d939e0db3d8fd502f016face67093a5aecbf628afd4ea01438af87
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\Fallkyriya\obj\Release\Fallkyriya.pdb

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ