2b3c91558227e2aaccab555b6988aa7edc79c14b09996a4535d2358ece8a16bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b3c91558227e2aaccab555b6988aa7edc79c14b09996a4535d2358ece8a16bd
Size

133KB
MD5

b4ed793de9df829e20ef1b6dcc2c60eb
SHA1

07bc722947262e5f5a19a67ad2419b19b981c18e
SHA256

2b3c91558227e2aaccab555b6988aa7edc79c14b09996a4535d2358ece8a16bd
SHA512

40af7412b78fce2b61498566395e2ff07f3aefb1b8cc78c4ef44ab742b7cf6248e78d58c7db5fcaf06c3eb7823526d9bd6f6700e488f6e8e56467b64628b65f0
SSDEEP

3072:+LkaZu5VYlttabValYbRJbysKrK8JS1C1AuBpGA9:+Lkac4ARUJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b3c91558227e2aaccab555b6988aa7edc79c14b09996a4535d2358ece8a16bd

Files

2b3c91558227e2aaccab555b6988aa7edc79c14b09996a4535d2358ece8a16bd
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\My Documents\Visual Studio 2008\Projects\WindowsFormsApplication7\WindowsFormsApplication7\obj\Debug\WindowsFormsApplication7.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ