34bcdd94a2eccc9c8f5b7457bea879f9c349c11a54ecba530d93bf5a16e02f50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34bcdd94a2eccc9c8f5b7457bea879f9c349c11a54ecba530d93bf5a16e02f50
Size

1.0MB
MD5

bcb1aee329c81a9537e6bfb976021396
SHA1

7738e58a7fee3aa9c179f5a1d294fd8f757d4d3e
SHA256

34bcdd94a2eccc9c8f5b7457bea879f9c349c11a54ecba530d93bf5a16e02f50
SHA512

d060157037b3467be7cf16110ffa559b9c038216c8e87b7b9e0af6fc8376cd0f4cf3f4c03e9b165dd43029c3e2d5a71dea7d1a1a4fcfac56c93c072c3ae5a8a8
SSDEEP

12288:gIcjYMWU2Hfk3LjTiQJE5QjrKRnKVzzzVzzz9Foxp+5k9If6PpchFTtv5tjtDWJg:5Mj2Hfk3rjmGnhzXMzPnhAdZl27UIqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34bcdd94a2eccc9c8f5b7457bea879f9c349c11a54ecba530d93bf5a16e02f50

Files

34bcdd94a2eccc9c8f5b7457bea879f9c349c11a54ecba530d93bf5a16e02f50
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\src\repos\prographics\Source\VVShell\obj\Debug\VVShell.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 975KB - Virtual size: 974KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ