dd057134cbbf739c468747a4a9c99aa8b9a9162140d7990253e20d56025e652c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd057134cbbf739c468747a4a9c99aa8b9a9162140d7990253e20d56025e652c
Size

1.0MB
MD5

8ba647c60e547bb79d50f671b1e7e77f
SHA1

e35001bef3dfba66c40b7822b1e6e005970dc879
SHA256

dd057134cbbf739c468747a4a9c99aa8b9a9162140d7990253e20d56025e652c
SHA512

a8613d30406408b5c09798add15f9be7eb24fe113eb02a5e0c717ba33d1112524dfdee597fae1938e36291342937095ac0d3ae0a5c1f19f83b7067dac9bd3083
SSDEEP

24576:L+00YHfk3rjmGnhzRMzPnhAdZlQdIGqQ:L+00gf/UTS/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd057134cbbf739c468747a4a9c99aa8b9a9162140d7990253e20d56025e652c

Files

dd057134cbbf739c468747a4a9c99aa8b9a9162140d7990253e20d56025e652c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Repos\prographics\Source\VVShell\obj\Debug\VVShell.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 973KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ