2024-05-13_da52aca0e37e7fff69654d9f8f86b0f1_petya | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-13_da52aca0e37e7fff69654d9f8f86b0f1_petya
Size

11KB
MD5

da52aca0e37e7fff69654d9f8f86b0f1
SHA1

509eacd0f8921de3eec05dc0e048dddb6c676b77
SHA256

497234b803da69df2d17a8b415b3d65c693e7e7da946346c91067ff9ced1b5dc
SHA512

2a0e507bdb1323a9bdb3f1fdbf0bdbf2227a6299a953dc50a3eb410b25dedb551747a7f017918616e4d36c8f8d2c919667876ae97c32c5328fd44d6dc076935a
SSDEEP

96:gA5xjwEgQJVmLmvx9vLzb7Lo5Fr0+NdMnDIikVLo5EamhNUEILcNK5BhBJDBXm63:goFwEJ60/g5KudMojamyZ1HMDY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-13_da52aca0e37e7fff69654d9f8f86b0f1_petya

Files

2024-05-13_da52aca0e37e7fff69654d9f8f86b0f1_petya
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Krilnezz\source\repos\ConsoleApp1\ConsoleApp1\obj\Release\net8.0\ConsoleApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ