992a124530ae639a16898491623dc995a214d863eb050be99ddb71cff75db98c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

992a124530ae639a16898491623dc995a214d863eb050be99ddb71cff75db98c
Size

312KB
MD5

29314f5803dd2e7d773110d75753b92b
SHA1

680269976dd84ab28b5d27a7f6908c270c75595d
SHA256

992a124530ae639a16898491623dc995a214d863eb050be99ddb71cff75db98c
SHA512

782586db6d776fbdb488dcc3575dc68ad0fe16aee8e193ad4222f0f9947d39e3dd477709018b4a2104e511ab63e317dc0dacb176b9d8ea566481ecd8642c9a8a
SSDEEP

3072:TepmZOEzD72KHIkU7EBzDZC8sY2T0n+gzD7ZczDDATto9zD8HHZeDwk/aV:Tepmqke/8s9T0n+NATVa/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
992a124530ae639a16898491623dc995a214d863eb050be99ddb71cff75db98c

Files

992a124530ae639a16898491623dc995a214d863eb050be99ddb71cff75db98c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\飞\Desktop\AVEShowCase\AVEShowCase\obj\Debug\AVEShowCase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ