41075a26a04b275417fdb62d276f62c8a0ef6a460dd1bed6dc45d9768680b2da | Triage

Sharing

General

Target

41075a26a04b275417fdb62d276f62c8a0ef6a460dd1bed6dc45d9768680b2da
Size

60KB
MD5

0b1d7c043be8c696d53d63fc0c834195
SHA1

23063660cce71c3a456530cbfd9f35f24e150be2
SHA256

41075a26a04b275417fdb62d276f62c8a0ef6a460dd1bed6dc45d9768680b2da
SHA512

efba9fa70ebba40d12f6a9b9cd605fd139fcef033e0ddf458b6b6df07842565eda9859201a1705d009648bb2336988e26f5a21ea57833897b6b522d37b7c75ee
SSDEEP

1536:yvfR0V/JL/JqUTqK2AUR880/rH4+XE53pIIDFYKrrXrPx5S:8aV7TqK2R880/r8fuQx5S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41075a26a04b275417fdb62d276f62c8a0ef6a460dd1bed6dc45d9768680b2da

Files

41075a26a04b275417fdb62d276f62c8a0ef6a460dd1bed6dc45d9768680b2da
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wallstreet\source\repos\WindowsFormsApp3\WindowsFormsApp3\bin\x64\Release\liko.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ