08b0666c75e556270a0c4c1b2708e2d8cbd3bcd9ba0d25ff00fd0fd44dec06cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08b0666c75e556270a0c4c1b2708e2d8cbd3bcd9ba0d25ff00fd0fd44dec06cb
Size

118KB
MD5

e6fe1a22d9bffa0549b2dfe349cb2627
SHA1

f1713bfb25837198ee49a58c9284d204eb4a0615
SHA256

08b0666c75e556270a0c4c1b2708e2d8cbd3bcd9ba0d25ff00fd0fd44dec06cb
SHA512

36113ee88f62be18601302747c2c4d42c6bccc16c2204ecb6858a861a36a35a5295d2de42eeeeef6106970d7f6f627bbdec8b34878729b7bd5e30d1472eaf0ed
SSDEEP

3072:4IQLyg1oKxzg6CGwNr4tMMQxPuOPpg2Tc:49LVr1g6MWMrPPPpg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b0666c75e556270a0c4c1b2708e2d8cbd3bcd9ba0d25ff00fd0fd44dec06cb

Files

08b0666c75e556270a0c4c1b2708e2d8cbd3bcd9ba0d25ff00fd0fd44dec06cb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\uhy1z35by06\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ