f9b87a453b6ebdb3787ac621d1ae4b26b957d1ba5a962f63f79cb65a28ed92ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9b87a453b6ebdb3787ac621d1ae4b26b957d1ba5a962f63f79cb65a28ed92ce
Size

7KB
MD5

be2a427272167a6cdebc792f88b6e394
SHA1

13fbf3c1024fff5843b361271398f0eb24cef1b5
SHA256

f9b87a453b6ebdb3787ac621d1ae4b26b957d1ba5a962f63f79cb65a28ed92ce
SHA512

210241abf115537d679a07534e5d55206747dfc7ce3916d80dd275f615613cfeba04430e44961a6e473ce507326cf84bac5dca94ea73edb5a970966c4a481bb5
SSDEEP

96:ScmGiBBNzLAIZVWYcQIgI9QdyRC6aLNm0px2tXxH9datzNt:ScmGi/NzLAmVWP4I94+p8cBxaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9b87a453b6ebdb3787ac621d1ae4b26b957d1ba5a962f63f79cb65a28ed92ce

Files

f9b87a453b6ebdb3787ac621d1ae4b26b957d1ba5a962f63f79cb65a28ed92ce
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\C#\chapter1\zy5\zy5\obj\Debug\zy5.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ