696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473
Size

292KB
MD5

9c3316a9ff084ed4d0d072df5935f52d
SHA1

c6ef59aa3f0cd1bb727e2464bb728ab79342ad32
SHA256

696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473
SHA512

20a902e8adf47c9042d55e460c7e6c7749b7b192f58583e3d3a14fd46442c199d52feacbc18dd671c1122d3c44be910385b4fe199511b4629f9fb185bbf13c3b
SSDEEP

6144:5xvRZVLlfh7rZthO+JjkuHEEAt/wz/60baxHU:JZdfrXg+JwuKt/S/605

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473

Files

696b6b9f43e53387f7cef14c5da9b6c02b6bf4095849885d36479f8996e7e473
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Admin1\source\repos\RURansom\RURansom\obj\Debug\RURansom.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ