b4ee38bf7be24864e09da0b2982cd2b5992d50f893edc8f3b1770d442cde3980 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4ee38bf7be24864e09da0b2982cd2b5992d50f893edc8f3b1770d442cde3980
Size

2.3MB
MD5

1a6b874907a9b841ff80d234625d3168
SHA1

0ba8a7db7f34583a3d70ec764c3343048b55e07d
SHA256

b4ee38bf7be24864e09da0b2982cd2b5992d50f893edc8f3b1770d442cde3980
SHA512

309d98f39684fc1d8d015983cb166bd84c13c50dfec5f371e4c8a03a59c87fa1d73230569e9faad24da50d1eeb2edeec0025a19705927df59de2ba5d7bbdcd82
SSDEEP

49152:6sluwrdWfyS+ZouDRuy01eGLHmLQ6/hmkkFHQV5cnh:nluwhyN+2uc1eSL65mkdy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ee38bf7be24864e09da0b2982cd2b5992d50f893edc8f3b1770d442cde3980

Files

b4ee38bf7be24864e09da0b2982cd2b5992d50f893edc8f3b1770d442cde3980
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\gauyuu7ah9\obj\Release\Current.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ