c0fec1ebe691e1b8e7c6027acbc8e7e6f24dfeaa1dd526128db14d9a825f36fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0fec1ebe691e1b8e7c6027acbc8e7e6f24dfeaa1dd526128db14d9a825f36fb
Size

18KB
MD5

948d0cdad4e562288a4c8d4e22d69a62
SHA1

53cfc95eeaa088b0d6c97b4f394f77412ea50f6b
SHA256

c0fec1ebe691e1b8e7c6027acbc8e7e6f24dfeaa1dd526128db14d9a825f36fb
SHA512

2de784c85957723592e12981fc09f4167267723100f8b8c972abdada5d84f45fe4081f355869812dcb7b7bf11ce9e0ac64b932ae7ae81bf16775e61fcaebced4
SSDEEP

384:FYVRo09mDr7aTgv2LB6sNzQELzjyW5qzt+OT9mLezTtIfZFphYcX00cQ3c:FD09IzvpMRHqvMizTGHhYcX00c+c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0fec1ebe691e1b8e7c6027acbc8e7e6f24dfeaa1dd526128db14d9a825f36fb

Files

c0fec1ebe691e1b8e7c6027acbc8e7e6f24dfeaa1dd526128db14d9a825f36fb
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\repos\PDFEditorSDKExamples.pub\tempbuild\TiffExtractor.obj\Release.x64\TiffExtractor.pdb

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ