9c4fc8863b69831ba6b261d813788cd49677c2f02fe9c82ad8426141cd326ef4 | Triage

Sharing

General

Target

9c4fc8863b69831ba6b261d813788cd49677c2f02fe9c82ad8426141cd326ef4
Size

613KB
MD5

b32eb4a8fe11ff1285c91012101a6b1c
SHA1

323ef8a89c0818681b876e9dd38a766a7ff7ea9c
SHA256

9c4fc8863b69831ba6b261d813788cd49677c2f02fe9c82ad8426141cd326ef4
SHA512

58f4c116b178e438682bb4c70ec780863b8fdac10327c472160b7bb14c864448070862728a8b9f53fc827c018e418937d7999f6267b9b7cb2e69f20e0629dc15
SSDEEP

12288:YpqoRGAfwtAerE0Sz+lT6jkdznt7sKNVFyinAfQdpTQlefYdtm68ZqV4:4RGcwGMmz+dpzn1E7fQd1IefYqqV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
9c4fc8863b69831ba6b261d813788cd49677c2f02fe9c82ad8426141cd326ef4

Files

9c4fc8863b69831ba6b261d813788cd49677c2f02fe9c82ad8426141cd326ef4
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\WorkHardKeepTrying\obj\Release\WorkHardKeepTrying.pdb

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ