9f59d95a275e705cc165ad3b8cf6bb3a8291199a95fa016c975f23efd1b03f72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f59d95a275e705cc165ad3b8cf6bb3a8291199a95fa016c975f23efd1b03f72
Size

545KB
MD5

733f7e4c2cc856d94641b339b715992d
SHA1

a90c9475111ec34116af27d43b32467ac1dc1d01
SHA256

9f59d95a275e705cc165ad3b8cf6bb3a8291199a95fa016c975f23efd1b03f72
SHA512

0e978100828cf35c643b026b46f7905c2a009181c39d59862f6b900ea6bb3f281bc68d6915ace61fda7b19beec8858fbebe074048d0c766f9720e33365a84c41
SSDEEP

3072:Nv1pKXg9Y6aPfHL00hksjKpWVlKXgTcRS/otOJJ7A1UpKXeLtZ6DM12HQIMDHRyR:NvYFRyuVR2U2so+YR2U2so+F/0URso+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f59d95a275e705cc165ad3b8cf6bb3a8291199a95fa016c975f23efd1b03f72

Files

9f59d95a275e705cc165ad3b8cf6bb3a8291199a95fa016c975f23efd1b03f72
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Cory\source\repos\ZipNShip\ZipNShipApp\obj\Debug\ZipNShipApp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ