f0d4da7730274a16b5eda5eb68c0d3c8ae80fb8b25a8b89737259d91d7546063 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0d4da7730274a16b5eda5eb68c0d3c8ae80fb8b25a8b89737259d91d7546063
Size

118KB
MD5

47ff69de3595ac0a5a34ee1d182da41e
SHA1

3eb7610589151abcfe37ded6befc221f8a99812c
SHA256

f0d4da7730274a16b5eda5eb68c0d3c8ae80fb8b25a8b89737259d91d7546063
SHA512

ad190376b499d49f308887fdbb1fa48f7e3879a2da036ce2f911dc6e8097ba489febe0291023911531eb3ca007259d92aab5013f1a1908cfd534cb80f34e2f9c
SSDEEP

3072:eGbBeB/J1vceZFZQW6xMvvEBAnGvVD4QAw/HEIkhP:eGbBsTVZFZQW6xRIUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0d4da7730274a16b5eda5eb68c0d3c8ae80fb8b25a8b89737259d91d7546063

Files

f0d4da7730274a16b5eda5eb68c0d3c8ae80fb8b25a8b89737259d91d7546063
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\nkug6\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ