a4daa058f838b98f8a0920de485bfbb1453b965396d9e2f2389f2d7945d9d7be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4daa058f838b98f8a0920de485bfbb1453b965396d9e2f2389f2d7945d9d7be
Size

118KB
MD5

cf5704f357cbfed5c9bda0ae99f3c563
SHA1

bf9da144c50e98d5347e8eb55b8e4ef7f2e41848
SHA256

a4daa058f838b98f8a0920de485bfbb1453b965396d9e2f2389f2d7945d9d7be
SHA512

73f45bc5c57fd6fe723b05f3bbf3ae7ee75c65b5677fc3c3571455ae920e6aafdbb4998ad13228280d4cc48744e7d881fc1c17719ace0afa4fb614721235eace
SSDEEP

1536:DpGGZ7Vw0NwAllESlsr+8fv0aFlwXwEelyY21J+pdcP+/H+mhO44A85VRDflYk:ZZ7VXNwAESurBUIlREM6qcPtmAS0fF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4daa058f838b98f8a0920de485bfbb1453b965396d9e2f2389f2d7945d9d7be

Files

a4daa058f838b98f8a0920de485bfbb1453b965396d9e2f2389f2d7945d9d7be
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\3zodct8xv2le\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ