88ebeca171233a97a301c81357d9fb4d16f30c991790cc44886f299ca5e998f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88ebeca171233a97a301c81357d9fb4d16f30c991790cc44886f299ca5e998f7
Size

2.4MB
MD5

cb25a5615462a0a01d2e60aaa60d2e71
SHA1

4a568425e5b6b22c6ed899480b6654516c48dda4
SHA256

88ebeca171233a97a301c81357d9fb4d16f30c991790cc44886f299ca5e998f7
SHA512

87ea110e8994b5d5468efd08c167f0c2438b54f7da288d3f91e8b79f7a4a0b771eadf4ea3635b58322c3071631a9ba0db444452416003b04510997bfd6e85b37
SSDEEP

49152:A+hRWmMLlJ7pLBATwJ8zfATwJtVAl/5KVAl/dVAl/ZcQIpVAl/DGuwGBuuuuuuug:A+hRWmMLlJ7pFATwJ8zfATwJtVAl/5KJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88ebeca171233a97a301c81357d9fb4d16f30c991790cc44886f299ca5e998f7

Files

88ebeca171233a97a301c81357d9fb4d16f30c991790cc44886f299ca5e998f7
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\rvallee\Documents\Visual Studio 2008\Projects\QQSolutions\Rolodex\Evolution\2.0.0\QuickRolodex.root\QuickRolodex\obj\x86\Release\QuickRolodex.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 207B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ