f7199859c00c8a6e151d078338a1c4833fc8fc0c5fd07d7d891d052d63824f7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7199859c00c8a6e151d078338a1c4833fc8fc0c5fd07d7d891d052d63824f7e
Size

708KB
MD5

2c0ef677991c9db756bcf61e1468ca91
SHA1

61e0c405d068ef45bb1bab2baf9152f871a5862a
SHA256

f7199859c00c8a6e151d078338a1c4833fc8fc0c5fd07d7d891d052d63824f7e
SHA512

570a60b8f8a866cf3acee7e38a2dbaa0301a91404bfbc8f0a0b5738a31604df79c0494b8f93b80dce0a55e2a371715424a74a804d527dcb1a92687d1a93b0e83
SSDEEP

6144:6AdZ4HzVbP8NFrsz5JVQYsW7DBzA3UrDNDgS7PzmZ1NG0djmdjqrB4/RwdjhvcuO:6AmP8NFIzdQiEktcSXkjmjB5Ijh+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7199859c00c8a6e151d078338a1c4833fc8fc0c5fd07d7d891d052d63824f7e

Files

f7199859c00c8a6e151d078338a1c4833fc8fc0c5fd07d7d891d052d63824f7e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\jenkins\workspace\codebase@0\agent\dotNet\Configuration\Winston\obj\Release\AppDynamics.Agent.Winston.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ