C:\Users\Admin\Documents\Visual Studio 2017\Projects\bytepress\bytepress\obj\Release\bytepress.pdb
Static task
static1
1 signatures
General
-
Target
bytepress.exe
-
Size
72KB
-
MD5
4478768f7aac1f0522bfb245a7e30a6e
-
SHA1
e929cf09204ff0880301ac64ac3cc2522799f51e
-
SHA256
128867d612cd9677f253a7240f72f25c487dbcdea183c8c23e2dcfa6ec3d95b4
-
SHA512
52d31eb1dd42949adf0023adeaeff4bcd32ca7f7eb3ce235c7aa0f9550d112f9679873a6e67449f8772699ffbaf9eedccd07c73113c1327c8ee12479831d0ed8
-
SSDEEP
1536:QzHUFWCmqbt3GBLONP/ESq+6HVXFjqCd5jJUc+OUEYbHQhiTxyeFS5ssO:uyPmiZG2P/ESqJVXFjqCzUEYbHT+I
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bytepress.exe
Files
-
bytepress.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ