b8ed50761032536868cf9518bacdc50a3fe21e5cc1c2e91b496039bb39489760 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8ed50761032536868cf9518bacdc50a3fe21e5cc1c2e91b496039bb39489760
Size

118KB
MD5

2eb31100047e9957e376b2032a6c3465
SHA1

fde9c249e806496d7371d347e458ac228a9455ab
SHA256

b8ed50761032536868cf9518bacdc50a3fe21e5cc1c2e91b496039bb39489760
SHA512

4572d1d6c5fa30ac9e1e982c8d411efc55fdefa566b1c3b2a4453ca71a18b53525236dbcf50eb20998fd9132ae3b3800a8e0ce1f87b6e090938922239addf4e4
SSDEEP

1536:WSPUGwDrw5L896hI8RmDgF1W/cBYDpdxfh8oj9Y2HrMI3nrtbnmQjFyLUd8:Z4Y5o9uH4DeI/sspdBhRLrntm2x8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8ed50761032536868cf9518bacdc50a3fe21e5cc1c2e91b496039bb39489760

Files

b8ed50761032536868cf9518bacdc50a3fe21e5cc1c2e91b496039bb39489760
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\c7063gjsm\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ