1b09045ba78b4fdd716831b0c8a9624ce70975f0e1896ec18d002c76ed838332 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b09045ba78b4fdd716831b0c8a9624ce70975f0e1896ec18d002c76ed838332
Size

118KB
MD5

136dc526d9cd91c1d636c4af54c38d01
SHA1

edecd1c4ba712a4f340c94c5012c339b62e44341
SHA256

1b09045ba78b4fdd716831b0c8a9624ce70975f0e1896ec18d002c76ed838332
SHA512

9e3d41b63f7be86a9ac42a4536aa9e5fe39e88c29ef1e520c4e28d3058897fb50495f2439b83123a63da6b99fffc0ebd4e8cdb70c41f7a1eb722ec8b3c8b156f
SSDEEP

3072:UTSko73lcOhgwY40bPMcw3xkL8i/VB5YBv+WiovHDVlzMr:kStRcOKwYvPMD3ETV7GiozM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b09045ba78b4fdd716831b0c8a9624ce70975f0e1896ec18d002c76ed838332

Files

1b09045ba78b4fdd716831b0c8a9624ce70975f0e1896ec18d002c76ed838332
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\r757k5lre17i39\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ