2d830ab6e960a0352b557bddd62f0e86f56318387ba712c5502c581805a6262f

General

Target

2d830ab6e960a0352b557bddd62f0e86f56318387ba712c5502c581805a6262f
Size

322KB
MD5

89c7f13bcca3a0f89d3098189604273b
SHA1

14cc4aa4bb1f636f569ed47250f6e055ad4fc75b
SHA256

2d830ab6e960a0352b557bddd62f0e86f56318387ba712c5502c581805a6262f
SHA512

35331b23cef9de1e96820b7e0ad2d217d54f3d3973dae0e4b241f56e854414ae5b1413d01452a26723c743a39eb7ed9e0ece36aba03363ee559bf70275e2ca8f
SSDEEP

6144:HAccRvJOVpYB0hy6898S7WTfk/v4SUW3jyvgCuFh1fA9MrrQF0DIqDdv/O1JqxGM:HAccRhOVphRm3GkYJNg1RrQFsIqDdv/V

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/69d1e288d7a88cca768aaec4cfd0b05d2319c910e1d8a872b40148656d042969.exe

2d830ab6e960a0352b557bddd62f0e86f56318387ba712c5502c581805a6262f
.zip

Password: infected
69d1e288d7a88cca768aaec4cfd0b05d2319c910e1d8a872b40148656d042969.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Nikola\Documents\Visual Studio 2019\Projects\Windows -TrioSDK\Trio.WakeNet.Installer\obj\Release\Trio.Net.Installer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 828KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ