dc1ab97282c504c40b3e1d29c232e90b88f23640a445e6ae084ad9cdc1abe134 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc1ab97282c504c40b3e1d29c232e90b88f23640a445e6ae084ad9cdc1abe134
Size

213KB
MD5

4b4783684e0991c323c318f638965524
SHA1

be2932b6e14e014b3b7fa1ac4e3dc4e64b779e75
SHA256

dc1ab97282c504c40b3e1d29c232e90b88f23640a445e6ae084ad9cdc1abe134
SHA512

de5c81dcae67337cb5f8ff39919214812a8953d20ea98125d3dd687fb79e5d44690fee6e8b9a95fa49aa098b41c0097387d2744221b4a1799bcc1085a1a408d0
SSDEEP

6144:DritNalHM0OFcRU97Rjz2YsMSoMvGC4IZqbhzj:DUN653RE5rsMMvZZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc1ab97282c504c40b3e1d29c232e90b88f23640a445e6ae084ad9cdc1abe134

Files

dc1ab97282c504c40b3e1d29c232e90b88f23640a445e6ae084ad9cdc1abe134
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\p9sduqg1ufdr67\obj\Release\Truth.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ