8c3ff6749c1864d2dd8c5149ecf0363105aad94979dcf5a300a488fb4a4fc881 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c3ff6749c1864d2dd8c5149ecf0363105aad94979dcf5a300a488fb4a4fc881
Size

159KB
MD5

a3312bf1abb8d92a5c0365c8019cc75d
SHA1

d91c5f2a1d4ccedea46af9c8dbaeb3ada5ffa845
SHA256

8c3ff6749c1864d2dd8c5149ecf0363105aad94979dcf5a300a488fb4a4fc881
SHA512

03e82540e7835e75ebe56123063a032f6b397c1495c7b9ab05123a84fe9506827e95ba8ec46dc41a54c64f3f960a4297bf56c29af2ea2ca2c2b3db2e57e85bd9
SSDEEP

3072:OqsF5ssTAB3+tVnlpM3UQJhXIOKijLT4z42Si424d424uXm8/+yWreCNhWC1G:nsF51r7nl23hNKWTj//fEeCNh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c3ff6749c1864d2dd8c5149ecf0363105aad94979dcf5a300a488fb4a4fc881

Files

8c3ff6749c1864d2dd8c5149ecf0363105aad94979dcf5a300a488fb4a4fc881
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Software\PL_WELDER\PL_WELDER\obj\x64\Debug\PL_WELDER.pdb

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ