f3fb6d095a2424b73de9ec6af2a4f057ee4b883957b88a60e247316be2bd900b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3fb6d095a2424b73de9ec6af2a4f057ee4b883957b88a60e247316be2bd900b
Size

7KB
MD5

a6e6de9807fd76f647e0c2dcc255bc6f
SHA1

999f25202c2a4ddc39b45105277174de0d055a9b
SHA256

f3fb6d095a2424b73de9ec6af2a4f057ee4b883957b88a60e247316be2bd900b
SHA512

44863909dc8cb01daf638540333b410394ba256482cd79594cb6584f59654167fb77d1456788ba2421d17da463830e364c72b6b734d4a0fd4a46e8da1a029377
SSDEEP

96:nu3Eq1dKEBMOLWQ4kB2oCaxhYBgBlLYjUHtWBztVjMtqnZYVo4FOzNt:u3D1dKE29ghYy8UHwBz7jMtqZ79

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3fb6d095a2424b73de9ec6af2a4f057ee4b883957b88a60e247316be2bd900b

Files

f3fb6d095a2424b73de9ec6af2a4f057ee4b883957b88a60e247316be2bd900b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Documents\PluralSight\net-interoperability-fundamentals\net-interoperability-fundamentals-m5\Demos\after\DynamicDispatch\DynamicDispatch\obj\Debug\DynamicDispatch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ