sharp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sharp.exe
Size

714KB
MD5

4bd55165037006dd92efbbe53269da61
SHA1

42e8eec4d406fac705d04306fc714b0ef5314fe5
SHA256

2a600b25b8c8c25f95ca5540e50d3233c90d5ed21f5eecb32c84e104f2bf7695
SHA512

e018d9425c6efb2ae0a8eaa8df0974f6a60abfbb5da3b1f0bcbb0407456f6317f530b8468b554f53dbbc30d9725ed3bbd8573b6f71bd4c9dd465d0da9b1554d9
SSDEEP

12288:PBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTU:PBjk38WuBcAbwoA/BkjSHXP36RMG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sharp.exe

Files

sharp.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Gang\Videos\Captures\SharpTokenFinder\SharpTokenFinder\obj\x64\Release\SharpTokenFinder.pdb

Sections

.text
Size: 712KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ