336726cf6a91a50498eef3ffdde6a1b87270e279bcbd6695709f13cea19c1ce2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

336726cf6a91a50498eef3ffdde6a1b87270e279bcbd6695709f13cea19c1ce2
Size

118KB
MD5

bc3ea415598f57485368d9eecf43b609
SHA1

3777624530b9b563b9ba6c96fdbf6d4b233d3eb9
SHA256

336726cf6a91a50498eef3ffdde6a1b87270e279bcbd6695709f13cea19c1ce2
SHA512

55c2f393cc4fe4e604d2a19818f48e8e19b3d5f54ad54daaacda6989d2a4df893925ae1022da54f4d961d49ad28f7b17547e5c0031f54f699ced6555b354cff1
SSDEEP

3072:3/6EbApzyWyBDiids/pE5uJnwzH4cSTOLImK21dj3NdWX5:S1lyh1igsBs4wEcq5G1drNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
336726cf6a91a50498eef3ffdde6a1b87270e279bcbd6695709f13cea19c1ce2

Files

336726cf6a91a50498eef3ffdde6a1b87270e279bcbd6695709f13cea19c1ce2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\adhar1zfxam8wl\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ