2ebfe89d4594f44d5205df1809d38cb518d7e0791e62b1b28b15caa0b9e08a72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ebfe89d4594f44d5205df1809d38cb518d7e0791e62b1b28b15caa0b9e08a72
Size

4.7MB
MD5

bea712435a9bb87bc1c9be04b63742e3
SHA1

3e5ea9cb32a3617564bfc2d40919dc409ca5b40c
SHA256

2ebfe89d4594f44d5205df1809d38cb518d7e0791e62b1b28b15caa0b9e08a72
SHA512

a5f87be00e49596f92cba5cd929525c50490e0ade824b0bea0eb87b69d32993b4c0dffa0c9b20e569ef29e93c4245af32fa594fc32830632ad0058635b1e3f6b
SSDEEP

24576:q8+XlLMQuw5vCw9m4xxoFg+XW3ac7X8+Xl:q8+1QIe4x1t8+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ebfe89d4594f44d5205df1809d38cb518d7e0791e62b1b28b15caa0b9e08a72

Files

2ebfe89d4594f44d5205df1809d38cb518d7e0791e62b1b28b15caa0b9e08a72
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\wewio\Desktop\Programowanie\Visual Studio\source\repos\ScinawczykSredni\Start\obj\Debug\ScinawczykSredni.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ