ffcff1cf28b4a23cb4079f5d3b21b117ce0a96a2470195a52162583cfa7b3197 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffcff1cf28b4a23cb4079f5d3b21b117ce0a96a2470195a52162583cfa7b3197
Size

1.1MB
MD5

8e56d869fbf7546572e8296a85ca5d7b
SHA1

66ea82dc41c366e73a35de7924459cffbd9d0903
SHA256

ffcff1cf28b4a23cb4079f5d3b21b117ce0a96a2470195a52162583cfa7b3197
SHA512

460c74b391264408f55623e331b002cff894e6afbed740f231847f4e26a377da924e44436432083b32c57de8e8518a1dac200441f112668eb335c243183bbc7d
SSDEEP

6144:/zhWJvHF9LYURCjCGq+6Ne2eD2J5POLrHICJvH:LGvDYURdGl9X23POLrHIgv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffcff1cf28b4a23cb4079f5d3b21b117ce0a96a2470195a52162583cfa7b3197

Files

ffcff1cf28b4a23cb4079f5d3b21b117ce0a96a2470195a52162583cfa7b3197
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ramin\Documents\Visual Studio 2013\Projects\File Crypter\File Crypter\obj\Debug\File Crypter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ