0dac5c48364d85c07f9e1806f84d68e840d0f65b3271816cf87d345f9d7777f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dac5c48364d85c07f9e1806f84d68e840d0f65b3271816cf87d345f9d7777f9
Size

96KB
MD5

9bed0c78753576ae50b17b95bc60e2cc
SHA1

65a60f8814edba347bdb26dedbe62bb376c81575
SHA256

0dac5c48364d85c07f9e1806f84d68e840d0f65b3271816cf87d345f9d7777f9
SHA512

e8395d5bc84d610df2d34049a786848d9eb77ca7ddd0fc113ee225b7d19702e57913f1d1a6bd276d9adc5054e1c80fb7cfed8c58f75c6ca4e0a6148e8361cdc9
SSDEEP

1536:FbbhdpT7d2ZAB2ZA7DUttj9Fx5T4Wvx5q3LNXZyI+aesYHZDB8CBP8S5jlwhs5yp:FbbhdpT0VqotPH+Wzq3L/yme9PXrvwhc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dac5c48364d85c07f9e1806f84d68e840d0f65b3271816cf87d345f9d7777f9

Files

0dac5c48364d85c07f9e1806f84d68e840d0f65b3271816cf87d345f9d7777f9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FCC\Documents\Visual Studio 2010\jose luis baez\jose luis baez\jesus\costructor\WindowsFormsApplication1\WindowsFormsApplication1\obj\x86\Debug\WindowsFormsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ