336cc54d023b34d12477f82ebd0d088ec0be3b929dcb7942df029486b9e50786 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

336cc54d023b34d12477f82ebd0d088ec0be3b929dcb7942df029486b9e50786
Size

13KB
MD5

a50f7aa949ec2323856ed3fcc4897f2f
SHA1

054825d37566e9f4cee71c57e7615d601ba1e3cd
SHA256

336cc54d023b34d12477f82ebd0d088ec0be3b929dcb7942df029486b9e50786
SHA512

63e62e4c54d5c642b9ba0844cb59d032b845849214ad77dd68fd07dd44d0d5df27a4051201b5ca3eb8ba865c43c703bc36345e6c13a2869e8cfc8a9f714c0713
SSDEEP

384:uefauxNLOGhy8QC7WAbGma9ckT4z6T7IoE:Xyuxxdhy8QKWAa+kTTT7IoE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PDF2PNGUI_1.1.1_BIN/PDF2PNGUI.exe

Files

336cc54d023b34d12477f82ebd0d088ec0be3b929dcb7942df029486b9e50786
.zip
PDF2PNGUI_1.1.1_BIN/PDF2PNGUI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\makoto\source\repos\PDF2PNGUI\PDF2PNGUI\obj\Release\PDF2PNGUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ