71590c7a1fc3ab8e8096af9afc0e4da2f9f451b5b0cc37200c2f3671ee282e77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71590c7a1fc3ab8e8096af9afc0e4da2f9f451b5b0cc37200c2f3671ee282e77
Size

567KB
MD5

df50f255e5d3b91c91086040e884c2cb
SHA1

982a84934790b868072c6fac71ddb299aa425d01
SHA256

71590c7a1fc3ab8e8096af9afc0e4da2f9f451b5b0cc37200c2f3671ee282e77
SHA512

4938feba5560d3edc81e597fd962486488f0855a6d052c713217e81769e237cae8e0dcca70505047712e6028d9c90a884544003560a524e3a3890af5d22f5f5a
SSDEEP

12288:Gf2Ov+kR/c07tYZLyOJ1nlffll8QNOBf7sjqDz6/wM5pu+3:wFRU0BYZOEvlHkojSz63V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71590c7a1fc3ab8e8096af9afc0e4da2f9f451b5b0cc37200c2f3671ee282e77

Files

71590c7a1fc3ab8e8096af9afc0e4da2f9f451b5b0cc37200c2f3671ee282e77
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\HFayo\obj\Release\HFayo.pdb

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ