5c18b114a9fab4f9a8c80d4b33c3084a06f5aa65c35fa0adb8e6fffc1ad8f0db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c18b114a9fab4f9a8c80d4b33c3084a06f5aa65c35fa0adb8e6fffc1ad8f0db
Size

117KB
MD5

6f28cf4e5b3a2ed1b37bc5b677fba51d
SHA1

23f113e3c053a924b8b5d0845b66b1f040907edd
SHA256

5c18b114a9fab4f9a8c80d4b33c3084a06f5aa65c35fa0adb8e6fffc1ad8f0db
SHA512

567941e1a412f75b94670b3436419b4421589de1bf2ca48dce73d2cebe3612c9a9a2528b3b418879c08533f1a6628f228181322f2ac9e07cf7037b6d887ae635
SSDEEP

3072:JyZAglckTlCneSj/p5ESENiRlpxSo9Zqgxxm:J5Sa26l/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c18b114a9fab4f9a8c80d4b33c3084a06f5aa65c35fa0adb8e6fffc1ad8f0db

Files

5c18b114a9fab4f9a8c80d4b33c3084a06f5aa65c35fa0adb8e6fffc1ad8f0db
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Albert\Desktop\ExcelProcess\ExcelProcess\ExcelProcess\obj\Debug\ExcelProcess.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ