b9a0ee914dbe267179f0b9bb71fd18134ca6d8adbfb1e75132875bf9bcd5ba7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9a0ee914dbe267179f0b9bb71fd18134ca6d8adbfb1e75132875bf9bcd5ba7c
Size

2.7MB
MD5

81afc103c9a8f6d7e0902052974d94f1
SHA1

52c5560f99890a0a1b9afa6bde4f41a76a4f7516
SHA256

b9a0ee914dbe267179f0b9bb71fd18134ca6d8adbfb1e75132875bf9bcd5ba7c
SHA512

0cb11ff1a2f28cf4aa057f6fe18bae768140f3a98c8770ee965ad63d6e79ff01f5d8946c4178b6a25e8a4f99551adaecf79ed2bd86e0b2e5c17ca63c5bfe67d5
SSDEEP

24576:5HH+kJPdB1jnJoRzNFDMndDHBdZaNfOzAiikLc09hYxebxh7ZRFM/RKvMkiaTqmH:MkJPLtnJodvUzZ1qMdFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a0ee914dbe267179f0b9bb71fd18134ca6d8adbfb1e75132875bf9bcd5ba7c

Files

b9a0ee914dbe267179f0b9bb71fd18134ca6d8adbfb1e75132875bf9bcd5ba7c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Matheus Miranda\source\repos\WPF1\WPF1\obj\Debug\WPF1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ