70b8750c500a1971a3db3ee78431c086fa9a5abcb8106454a76d516c41b69d99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70b8750c500a1971a3db3ee78431c086fa9a5abcb8106454a76d516c41b69d99
Size

11KB
MD5

a624638970ccc36692001992f8b2f164
SHA1

fab7cfaea4de8f248eb281f02b3b8b8f5706e083
SHA256

70b8750c500a1971a3db3ee78431c086fa9a5abcb8106454a76d516c41b69d99
SHA512

320da2312edce95217aef06144124952638c721863c7964e776850dbcabe4cc847e8bc3ca01489b6d240f8648b608bce4679dcc200a60becd7277409c6b18817
SSDEEP

192:xdOn4G4C4PNDc0ep6uHDFEWGEFvPsEumNtZjwGqwAKwH1+XVOIfm3zLV:O4nCyNDcFp6uPFHsERRjZ1AJH1SVPfmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70b8750c500a1971a3db3ee78431c086fa9a5abcb8106454a76d516c41b69d99

Files

70b8750c500a1971a3db3ee78431c086fa9a5abcb8106454a76d516c41b69d99
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\hamdi\source\repos\EncryptDecrypt\obj\Debug\EncryptDecrypt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ