ad7b73f6d6850509e6c5d3ce4b078035a25474999267fb10093c729fbd0a950a | Triage

Sharing

General

Target

ad7b73f6d6850509e6c5d3ce4b078035a25474999267fb10093c729fbd0a950a
Size

1.4MB
MD5

bcc29bd2d2cc14d1e352bc56673a205c
SHA1

389e9fdaaec47937c20798f4f833acc75c648596
SHA256

ad7b73f6d6850509e6c5d3ce4b078035a25474999267fb10093c729fbd0a950a
SHA512

4b77e5843571e1d6b223026d3ce712ddf098672767ae7a30bb4bbfddb543476285c6c6c20dafbc24157b05c68f43261b41f40478b508af04930a2a2282cd8d74
SSDEEP

12288:Y1/0Ves/0LCTlYySh30bK0KWAeswuvXXj9YySNmE81oFk92kVMYc6W0RGCIcZFMm:TeS02ZShEK6YfXjRSN5zkS6WgIcMEK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad7b73f6d6850509e6c5d3ce4b078035a25474999267fb10093c729fbd0a950a

Files

ad7b73f6d6850509e6c5d3ce4b078035a25474999267fb10093c729fbd0a950a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\jenkins\workspace\cicd-pipelines\project\zgzn\zgzn-oem-dll\pos-VueChromeCommon\zgpos\obj\x86\Release\zgzn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ