91fb1c64166906768693224b123211e7f6aaaab6c4bfd831708eb8844eb9ecde

General

Target

91fb1c64166906768693224b123211e7f6aaaab6c4bfd831708eb8844eb9ecde
Size

849KB
MD5

4b2e2848f5c39fdd539c79df2bd85bc3
SHA1

332d154174793313c5b0efd3e06030a5699a4014
SHA256

91fb1c64166906768693224b123211e7f6aaaab6c4bfd831708eb8844eb9ecde
SHA512

06ef888ee858739cc99304fb8d0672855133bd0052acf3161c7b5f6ef5cdb08940c2fbfcd726e5aa65771ac87a36e3ad29505560c9ebc1a2beb223a446a86e38
SSDEEP

24576:Y7vwnzbA6hYUo/mKrSqbztEe6kh8hiXg2z1s/EYZJwq:Yz6zb1hYUxKrpyGpg2z6/VR

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/98b668f7457089866b6364c672e8dd35b12a24899eb80fdfcfc2a5aab8d9aa5b.exe

91fb1c64166906768693224b123211e7f6aaaab6c4bfd831708eb8844eb9ecde
.zip

Password: infected
98b668f7457089866b6364c672e8dd35b12a24899eb80fdfcfc2a5aab8d9aa5b.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\Fallkyriya\obj\Release\Fallkyriya.pdb

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ