25f2ee30e39266731549f27f8608df0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25f2ee30e39266731549f27f8608df0f
Size

33KB
MD5

25f2ee30e39266731549f27f8608df0f
SHA1

868a976d99911386055047012e723e27fd47f6f1
SHA256

1e92f71a4de85e6cf2b3d7f2830651eca4416e1649426582c901f856448707e0
SHA512

fd857a55b95ff4dee4bf3942ed026964253a3e815ff04a82b48fd9e3945fd6052aa25a21dae20180aaa9cb39a001064befbdcef14713e7da3ae41337816b4881
SSDEEP

768:l+8a69HrrSjo3j7l6mScOB1UZAeu5bY3x:XeSfl6mkyRUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25f2ee30e39266731549f27f8608df0f

Files

25f2ee30e39266731549f27f8608df0f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\sigsauer\BushidoEngine\obj\Debug\sigsauer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ