fb7139269fb66a4e9ab0c9fbaf320985430a34dbcff54197ee57330b0c3ad84b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb7139269fb66a4e9ab0c9fbaf320985430a34dbcff54197ee57330b0c3ad84b
Size

118KB
MD5

fcc91a6ede52b5736429d081124cc228
SHA1

137e81c93db11bf57c6c63bbbad5159aee8a27ca
SHA256

fb7139269fb66a4e9ab0c9fbaf320985430a34dbcff54197ee57330b0c3ad84b
SHA512

a95fc56e6f3ab7ab9615bd17351320232e94b54c6a3a1603102b23c20a2b02c2332ce951b7df498a91ab45365a774bcb39886c08fc37b14479d0c721bf21519f
SSDEEP

3072:4Jkpd1OJ2YKzn3mLXkP8EI6voEXadL/KL1i+9Nsya:+u4J2dnUXkP8hL/KL1i+My

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb7139269fb66a4e9ab0c9fbaf320985430a34dbcff54197ee57330b0c3ad84b

Files

fb7139269fb66a4e9ab0c9fbaf320985430a34dbcff54197ee57330b0c3ad84b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\0epwxb5\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ