efc814951d4493a90a4a7b7c41fab75d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efc814951d4493a90a4a7b7c41fab75d
Size

118KB
MD5

efc814951d4493a90a4a7b7c41fab75d
SHA1

3e62c1bbbf997c0016331aaea72f5cadaa592d84
SHA256

953c6d80407d710134605b8a477681cb0b85455400bbbcb6b056c62ec517d444
SHA512

8c1a0a12ce65156969ebb49222c078338864b808807c94454e393e166caaf69182adb2ef815b7a344b2a92057fe8a5551a50bcf332ede92a02996e407ae9cf45
SSDEEP

3072:lnWw1AEZmlbSTB3RNJLm7cH9UqlWJsCbjkFBHk0ertTx:JgEZs+13XJLm7cdu3k/Hk0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efc814951d4493a90a4a7b7c41fab75d

Files

efc814951d4493a90a4a7b7c41fab75d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\bvhvjjku8p5v1\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ