LdapSignCheck[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LdapSignCheck.exe
Size

156KB
MD5

fa44a85f35c4309488a6dbc25973e0c9
SHA1

a0a81dadf5aa9886f4cca9001c0062b2a1e60fa2
SHA256

dcfd32b174db3737f5cbc65458cc97c3e27d499140a1df07cb7e86e858331709
SHA512

387b3d7079e5e7217ff819b700fb2333bb957c204a84d8216193eb885ca25ef749228608aed19347024743fc584e2e2f4e7340d643c6247681b9b1f3dbc80e2a
SSDEEP

3072:Jplcvxv+SKFjVUBkHQCuBSAX0sCrv04tnv22gaxH2zJeTzQP8sAdQY7+7bK:JyxmSijeNCuEkI8zaxHUJeTUUTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LdapSignCheck.exe

Files

LdapSignCheck.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\cube0x0\Desktop\icc\LdapSignCheck\LdapSignCheck\obj\Release\LdapSignCheck.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ