ad3bba9b554a6f385d2cb88043d1cb955bb5da97f03f30e4cc593aaaa2d76659 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad3bba9b554a6f385d2cb88043d1cb955bb5da97f03f30e4cc593aaaa2d76659
Size

118KB
MD5

0217ee04777c7f6f6e379e4853689a79
SHA1

7fde8074ca3786bb11926ca909a886594b1e0d3d
SHA256

ad3bba9b554a6f385d2cb88043d1cb955bb5da97f03f30e4cc593aaaa2d76659
SHA512

b1e33005a83284a593470c2e1d4c88d07010b03a73b3ea68eb48c13a050662987f81c7d4311283f8dc07ddba12cfb135fb461be8b662e68bf5ab5f76f640ef32
SSDEEP

3072:16V9FeyeIsV7PwdiLrfDfNvdV3i62XPPEljYu/JvdzOCmPh:16V9FeynspPwdifT9dV3i62XnEl8CF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad3bba9b554a6f385d2cb88043d1cb955bb5da97f03f30e4cc593aaaa2d76659

Files

ad3bba9b554a6f385d2cb88043d1cb955bb5da97f03f30e4cc593aaaa2d76659
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\q3w2khn\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ