4c7202328e0eb97d3f0ce6179ff886a969b834b4af0278cb1af69cb9ec695357 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c7202328e0eb97d3f0ce6179ff886a969b834b4af0278cb1af69cb9ec695357
Size

820KB
MD5

bd1b2e92f3de119d7254ac3ad363c84b
SHA1

79c162e97fa2eae325f03808f88e0cd926cc2a13
SHA256

4c7202328e0eb97d3f0ce6179ff886a969b834b4af0278cb1af69cb9ec695357
SHA512

92dc069f5b3f7ec0e8038ec06d4e726343316bf68e8451fe7bd6918529d1229029e1d86868af62757a210eaa355e18e2c71b0f54f20efdb8947515e7ad3a7c76
SSDEEP

12288:GZQwe2WeZUh22sdCAdEB5hqgWHW+4un96yxlKBjVzaeDaRmxRhz+6SdMGu:GFpdEB5kgW2be96bBha+RF+huG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7202328e0eb97d3f0ce6179ff886a969b834b4af0278cb1af69cb9ec695357

Files

4c7202328e0eb97d3f0ce6179ff886a969b834b4af0278cb1af69cb9ec695357
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Jenkins\workspace\FI\TPS-CMIT\DEV\PL000164\PR000292_DND\PrimeServicesDirectToDesktop_AP111937\Reporting_Widget\DirectToDesktop\obj\Debug\DirectToDesktop.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 818KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ