ff8a5537ac4efa4ae55f4c6ef2dcc41a9002a0ce9b5e011953f60380c55366d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff8a5537ac4efa4ae55f4c6ef2dcc41a9002a0ce9b5e011953f60380c55366d0
Size

31KB
MD5

94bacc3cdc7f6955a19267a029bb3f16
SHA1

92207fc3e62189ee7ed9f963d28239715694d8b0
SHA256

ff8a5537ac4efa4ae55f4c6ef2dcc41a9002a0ce9b5e011953f60380c55366d0
SHA512

52881a2d3f6aeeda4bf15efa6e4b50a495da448db904384570e8f6e9021e2092f3bfc091d75ede7d55175fe3ce3a5d70cb3808fcdc88beda0aae11240d56669d
SSDEEP

384:q3rUjHgqag9UeqEgDRj+uTf+NNSo+kmB5fKOg79+GiCZIbk+ERlb7fSa2U7krz21:XgDRj+uT+L7nmcRZIyF21ShqS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff8a5537ac4efa4ae55f4c6ef2dcc41a9002a0ce9b5e011953f60380c55366d0

Files

ff8a5537ac4efa4ae55f4c6ef2dcc41a9002a0ce9b5e011953f60380c55366d0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\WS\LHtoVIP\LHtoVIP\obj\x86\Debug\LHtoVIP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ