80c04c5c216d7f0b78c416caff0b76e996328fae6edab60767355261bb78471d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80c04c5c216d7f0b78c416caff0b76e996328fae6edab60767355261bb78471d
Size

61KB
MD5

bffdc70d1777e053bbee7a5af8c466e7
SHA1

1d68d5cd40f88c6f63a09016a832f5ad736b9b8c
SHA256

80c04c5c216d7f0b78c416caff0b76e996328fae6edab60767355261bb78471d
SHA512

6151e6fb3ced72c8496a8ac6069db222af3fbaabe90c74aa78a615d925ad0b4cb85a5392e0824f31eb043201d80cd7b75f38e958ee2c3aa4121e1adfe6ee475b
SSDEEP

768:S03ExSt3OYcCcUScq5A3GcZO7xxdWqHRaGdlLkrof4xg+Ki6hMIVZg:S00wteR5UsG5AnJHRaGXLkro6giC8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80c04c5c216d7f0b78c416caff0b76e996328fae6edab60767355261bb78471d

Files

80c04c5c216d7f0b78c416caff0b76e996328fae6edab60767355261bb78471d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Zrodla\Bus\VoyBusClient\sProd - client\Tools\Source\DownloadManager\DownloadManager\obj\Release\BusLoader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ