26f37356b70c1a94b646c49362d827edff3e272d5aac765b2e3ae5550df890cf | Triage

Sharing

General

Target

26f37356b70c1a94b646c49362d827edff3e272d5aac765b2e3ae5550df890cf
Size

1.7MB
MD5

47e7b5d467c9618cf7cb03b6dc2a72a1
SHA1

ba39a6d80a86316e56c277f156e821ccd65b68c3
SHA256

26f37356b70c1a94b646c49362d827edff3e272d5aac765b2e3ae5550df890cf
SHA512

5c42bd7c830864cfe6a5acb3c9f544e79c6a452e607b5ada75372a4ca34d7c87cd661e22e6b7ade05729af73b32f98cfa180219470d716ce1663932eeb5ad406
SSDEEP

49152:f/kV/Af5EGSdfu/kV/Af5EGSdfgc/kV/Af5EGSdfu/kV/Af5EGSdf6//eOAm5dGH:fMhAabdfuMhAabdfgcMhAabdfuMhAabD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26f37356b70c1a94b646c49362d827edff3e272d5aac765b2e3ae5550df890cf

Files

26f37356b70c1a94b646c49362d827edff3e272d5aac765b2e3ae5550df890cf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\usvitc00\Documents\Visual Studio 2015\Projects\DataPatch_Automation\DataPatch_Automation\obj\Debug\Data Patch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ