2024-05-14_0a4b53e776dd9e328675aed9e408c273_petya | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-14_0a4b53e776dd9e328675aed9e408c273_petya
Size

11KB
MD5

0a4b53e776dd9e328675aed9e408c273
SHA1

28f323284d9786779220e2ec9daeafefd5e8dfaa
SHA256

ed63cc6ff116193c644664eb082dc459a1c98adafd815c4ce77047da5d4b2c51
SHA512

fa187d9b99eb7bb7e8b78cd397813d03beba35a300a150e3e536b656a0151df18a7cbb8368547db5c52ea87287b303c309fdfa0b2512f12b6b2ebe237b6b3418
SSDEEP

96:SA5xjwEg68D2lYqcHqszb7Lo5Fr0+QdMnDwikVLo5EamhNUEILcNK5BhBJDBgm61:SoFwE122eqcg5KndMgjamyZiH5HDN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-14_0a4b53e776dd9e328675aed9e408c273_petya

Files

2024-05-14_0a4b53e776dd9e328675aed9e408c273_petya
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Krilnezz\source\repos\ConsoleApp1\ConsoleApp1\obj\Release\net8.0\AdobePatch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ