8cb726e3440f085a09b45e4ef2efb43f2dbfacb93abe001bc5e31344c39badf8 | Triage

Sharing

General

Target

8cb726e3440f085a09b45e4ef2efb43f2dbfacb93abe001bc5e31344c39badf8
Size

366KB
MD5

1fc643321386805613389f566271c1b0
SHA1

073263f5c40c8cdd819a94b89658004e0c3382d7
SHA256

8cb726e3440f085a09b45e4ef2efb43f2dbfacb93abe001bc5e31344c39badf8
SHA512

b757499f5185731603630a88386961fbd6ac25c7908a8336fd57ef53f1755eea5bc8a9c618d253cea977342c45f3a87b5c7919d125e4aa1a39509bfe9239b48a
SSDEEP

6144:maZ43Vc0WVUxOUBbsX6zWf0G+TP/XXVeXC8X3cO9bOXX3hrL:maZ43hGOFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cb726e3440f085a09b45e4ef2efb43f2dbfacb93abe001bc5e31344c39badf8

Files

8cb726e3440f085a09b45e4ef2efb43f2dbfacb93abe001bc5e31344c39badf8
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\2020 Products and Versions\PoshExeHostCmdV5\PoshExeHostCmd\obj\x64\Release\PoshExeHostCmdV5.pdb

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ