f38f0b61a99dcd3ccd524bdc11b4ae38e1d40a011d98becd6d0237c9206439ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f38f0b61a99dcd3ccd524bdc11b4ae38e1d40a011d98becd6d0237c9206439ab
Size

14KB
MD5

2e030e050c06088c3ad083a278080fec
SHA1

921162c3cd6c9d224979a09e1d0cd9828d7a1a3c
SHA256

f38f0b61a99dcd3ccd524bdc11b4ae38e1d40a011d98becd6d0237c9206439ab
SHA512

2d1bb39bfc2ce9504926ac522e0a240bab2e82fdd63aabc14c066da408a235f6e03c3e35b4d04efc02cce6c3d4541dea9656e87c8fb085081332092ef4b10249
SSDEEP

384:7m1gN5r6JX/7MWtdTnRMgoeFWi6f/4BbYc:7ca5rUTpM28isIbYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f38f0b61a99dcd3ccd524bdc11b4ae38e1d40a011d98becd6d0237c9206439ab

Files

f38f0b61a99dcd3ccd524bdc11b4ae38e1d40a011d98becd6d0237c9206439ab
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\survi\Source\Repos\Fic\Fic\ComRegister\obj\Release\ComRegister.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ