9f383019e7ea6253bfa4b419107df9770c3ee07d3711c2580db14a37ccdaff0f

General

Target

9f383019e7ea6253bfa4b419107df9770c3ee07d3711c2580db14a37ccdaff0f
Size

849KB
MD5

46182d74acdbb6c1ae6f4095cddd6ab6
SHA1

d005699c8be43256710a2b27e19bc6244916830d
SHA256

9f383019e7ea6253bfa4b419107df9770c3ee07d3711c2580db14a37ccdaff0f
SHA512

e4231c1e419011e4ceb4b3ed060dd9df95b31bc92c714cde65cb56ac386b0587f65d15659c186b3ee7d91476af9371e06b71fede68322aac48cc09b13d33d07c
SSDEEP

24576:pew6mWkUVjH7xN8Pg0Ede4vdXbx1kPLxYoC7P/OrEblY1lp:LWkUnaPg0PWxEVYxEEblC

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/98b668f7457089866b6364c672e8dd35b12a24899eb80fdfcfc2a5aab8d9aa5b.exe

9f383019e7ea6253bfa4b419107df9770c3ee07d3711c2580db14a37ccdaff0f
.zip

Password: infected
98b668f7457089866b6364c672e8dd35b12a24899eb80fdfcfc2a5aab8d9aa5b.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\Fallkyriya\obj\Release\Fallkyriya.pdb

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ