62719dbfe160229a549007b90e54e64d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62719dbfe160229a549007b90e54e64d
Size

128KB
MD5

62719dbfe160229a549007b90e54e64d
SHA1

4dfbc0aae6d3d1772622252d1b620ce523cc3f8d
SHA256

d9813b03d4ecbbe9301071015c657b212715584df576ea67e3c6a6939b78c494
SHA512

bae6b857f9fbfb131434b5d43a7aef17e3c5b124fcee569dc4a4f6c14e724b672b36db80eb79e94f0fe331d48bab96a3fb182a6cc1a6deb0b0c2881eef056563
SSDEEP

1536:YRFSnC1JkJkttttttttcRFoCYttt9JkJkJ5cXoDqeUSBqR0z6a6T53drxvLmIv1g:YRFMRF7Y2e14G4VijW4fTvRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62719dbfe160229a549007b90e54e64d

Files

62719dbfe160229a549007b90e54e64d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects.Net\Core\Client\GTBrowser\obj\x86\Debug\GTBrowser.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ