fb92ded0402a96899c09b495b06771e6136ce73611f5777c5520f60d89b95e91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb92ded0402a96899c09b495b06771e6136ce73611f5777c5520f60d89b95e91
Size

76KB
MD5

fa138177d6caf9f22de8676e60527734
SHA1

34073fad9e58e5e9c3122c7de6b8a571e3266ae3
SHA256

fb92ded0402a96899c09b495b06771e6136ce73611f5777c5520f60d89b95e91
SHA512

f680303ad1bd221e9dabce25ca3d35cbaa9b6edc73bc0ab8bdab26821f8664e50170febdee5a6efe4678c3f74abb6b557b10f658def7038ffef5c1795f918a67
SSDEEP

384:k1CjkvwKwq6ugTDPTkvwKwq6ugTDPP0dNDaz83aRB56IGRpsYMngFQ11DEnOSLSO:k1sDbDUdNDa++LATMg6WOOG06gDlD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb92ded0402a96899c09b495b06771e6136ce73611f5777c5520f60d89b95e91

Files

fb92ded0402a96899c09b495b06771e6136ce73611f5777c5520f60d89b95e91
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\legend\Documents\Visual Studio 2010\Projects\Skype Crasher\Skype Crasher\obj\x86\Release\Skype Crasher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ