7771d9991c625321e8d00cf5d5c736758adafa928e8609d60f59d46da87be2ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7771d9991c625321e8d00cf5d5c736758adafa928e8609d60f59d46da87be2ff
Size

118KB
MD5

279f3ebc2291dff06fd295c1491cd215
SHA1

a95f9dbdc6c2da52060f8ce476ff0d33b982f004
SHA256

7771d9991c625321e8d00cf5d5c736758adafa928e8609d60f59d46da87be2ff
SHA512

9db2bc63ec501fa312b40a493687c5485a627e5557ac5a388f7d0a012a58b14b2f14ce073daafe1bc188bbfe54dc425705d4dcaa0e49d19780598f79b0ec6b6b
SSDEEP

3072:xlEfeRXV+lanrbuUaSWgUcVXpIPLQ6q7e526qGfnq1wWW:xKG7pbnBWglVyDH40nq1wW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7771d9991c625321e8d00cf5d5c736758adafa928e8609d60f59d46da87be2ff

Files

7771d9991c625321e8d00cf5d5c736758adafa928e8609d60f59d46da87be2ff
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\m0v1vwa0p295m\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ