2024-05-14_b40d8f9f7457d1e5adafb35e8063b100_hiddentear | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-14_b40d8f9f7457d1e5adafb35e8063b100_hiddentear
Size

414KB
MD5

b40d8f9f7457d1e5adafb35e8063b100
SHA1

8a728dc1efaba298159fe56d8098061d644b2396
SHA256

4f1fb587b070aeacf857afaf04ca6d37d438efeec15b672a0981ce9c2bf89d2d
SHA512

48f800bb231ddfa8632266c61f404454fde4ee29dd02f811268948ab2047dfc49e01be18db9e6e62aa94067a63696c72e742d5cf588f60d0a19628a93f9f787c
SSDEEP

6144:Nv+lDAAB6fm00rx/Qdd1QkfRLT+vLtls6LEmynRsRU9:AdAAB6Mk1HfRLqzPlLEmynKRq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-14_b40d8f9f7457d1e5adafb35e8063b100_hiddentear

Files

2024-05-14_b40d8f9f7457d1e5adafb35e8063b100_hiddentear
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Tyler\Desktop\hidden-tear-master\hidden-tear\hidden-tear\obj\Debug\VapeHacksLoader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 385KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ