5b408fcd311393c370a9fa865616435c18647589297475a84f8a7518ac9f75c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b408fcd311393c370a9fa865616435c18647589297475a84f8a7518ac9f75c3
Size

118KB
MD5

7e61f9c0522b7bc4662a8d6c25fcd50e
SHA1

1b5077b2180ebfd361a60568b7d919869a4590ee
SHA256

5b408fcd311393c370a9fa865616435c18647589297475a84f8a7518ac9f75c3
SHA512

d9ebd39b30e3b884551bf0bb40f379896b1dd5b4a3f4f703af46665be1f5f14a5c20c3d430ef0aca6b5b19e8d005cb9997d2172b1fef67792ca14d0181423ffc
SSDEEP

1536:QsAP233Xfc/Lzj5QY9Z7Qbv2rLXO2LaeeG9Y2t8zmgt4raSnG8azMNlfhKMbi8Cy:hzc/LzjSOYw0XtBaEzyPy/DI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b408fcd311393c370a9fa865616435c18647589297475a84f8a7518ac9f75c3

Files

5b408fcd311393c370a9fa865616435c18647589297475a84f8a7518ac9f75c3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\r6zkefx767l0\obj\Release\NETCrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ