fb4f57f91288e8870313a22549e8346084e21b0218c70c9ccf85ada35feda16f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb4f57f91288e8870313a22549e8346084e21b0218c70c9ccf85ada35feda16f
Size

111KB
MD5

ade0cabd965a289969c5654514aefd72
SHA1

6ee12d2a82ab2fd491cdd52e2e0c786337b470bf
SHA256

fb4f57f91288e8870313a22549e8346084e21b0218c70c9ccf85ada35feda16f
SHA512

e36548ef2d78478ddef6a51132ce593edde7f45361b25a14d2b1f5d0a10e5e9a5f780e2a218aeb84efcf5caf198acb4c1156bd28a27d2af186ce9d13d7e4aee4
SSDEEP

3072:pdmQsAnFdM9tRN8dsRVS+KnEbm4avtTcdWj:pdkIFd2id0S+KnEbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4f57f91288e8870313a22549e8346084e21b0218c70c9ccf85ada35feda16f

Files

fb4f57f91288e8870313a22549e8346084e21b0218c70c9ccf85ada35feda16f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\41\s\AlphaAgent\versions\1.8.0.22\AlphaControlAgent\obj\Release\AteraAgent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ