95abb1ff23e79d1ccb8a08f9802fd8d3358f2f7f6895494f06ead92ae39ae0ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95abb1ff23e79d1ccb8a08f9802fd8d3358f2f7f6895494f06ead92ae39ae0ba
Size

296KB
MD5

3920320abe977a8205c64894ca6c7e03
SHA1

c7b79862b48101986f1cb72f4298055b4238c617
SHA256

95abb1ff23e79d1ccb8a08f9802fd8d3358f2f7f6895494f06ead92ae39ae0ba
SHA512

aacd03db1ef36b6978632dc2e3e1f3a2da82576c15750e8359238cb104333be7f9d2c8b3d4a12bb2a8dda1cd69c7f6149a77ec2c09197c219ff8b657de72dd71
SSDEEP

6144:5pUtp57JgcC9umP9mQwFpaSPBu+opYh/MLlRjdV55Y14PLckdK:Y7Ydfbe8uBuhpk/wd5HjVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95abb1ff23e79d1ccb8a08f9802fd8d3358f2f7f6895494f06ead92ae39ae0ba

Files

95abb1ff23e79d1ccb8a08f9802fd8d3358f2f7f6895494f06ead92ae39ae0ba
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\weckb\source\repos\Extension Installer\Extension Installer\obj\x64\Release\Extension Installer.pdb

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ