ac5d131ff0fa4a208c251c148f5010370eade15baccf2d156085d6412118e51d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac5d131ff0fa4a208c251c148f5010370eade15baccf2d156085d6412118e51d
Size

3.5MB
MD5

2b24865e9a00402600acafdbb337e439
SHA1

fc9f85f0f1f60709cf80eeaef52846360c8ed634
SHA256

ac5d131ff0fa4a208c251c148f5010370eade15baccf2d156085d6412118e51d
SHA512

7e741d46e013e7f5369aa97092b1c2a2cd59827f4953e54e56e894c71cfe2ec182d9bcef6b675598a449652c9420c33ad39fb7849288675ff0151cb75f1724a4
SSDEEP

98304:fIj2AgQ8jatj9PIrAeS9jqESOR5BcVEH929egPdmr8s:fq2w8Wtj92ATfbUEAZdmIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac5d131ff0fa4a208c251c148f5010370eade15baccf2d156085d6412118e51d

Files

ac5d131ff0fa4a208c251c148f5010370eade15baccf2d156085d6412118e51d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\tigge\Documents\Visual Studio 2012\Projects\WindowsFormsApplication1\WindowsFormsApplication1\obj\Debug\WindowsFormsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ