cdf27958cb000469af5a09db8b8122def2c9c32b67e61f9e5295c93033657fc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdf27958cb000469af5a09db8b8122def2c9c32b67e61f9e5295c93033657fc0
Size

41KB
MD5

ccac0e19b126ca16d8681d577fe080d5
SHA1

ba690ef03e7a966bee001d4b84d066aa2b74431d
SHA256

cdf27958cb000469af5a09db8b8122def2c9c32b67e61f9e5295c93033657fc0
SHA512

ab53de7ce4e928374a99267496b67a381f66e8e9c8bcd1b530f8da07f366198e36b4e5b859eb42947d9063c07399ce0d605d6870fb3c5324f89bad2dfa393427
SSDEEP

768:tkQ57ySKimlyT9qaYDEBxgjQxmoT49bZmlnokKaYzD5M:tkQ5cimltgBxiVU696okPYzDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdf27958cb000469af5a09db8b8122def2c9c32b67e61f9e5295c93033657fc0

Files

cdf27958cb000469af5a09db8b8122def2c9c32b67e61f9e5295c93033657fc0
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\jenkins\workspace\1Script_release_preview@2\src\oscript\obj\Release\net6.0\win-x64\oscript.pdb

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ