3a5c0e8623a0380029e7d72b7935f56f5820478ff4eab133c9d1bf4122cd9766 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a5c0e8623a0380029e7d72b7935f56f5820478ff4eab133c9d1bf4122cd9766
Size

4KB
MD5

4354bdaac588bcd5d676cefdc2fbc64b
SHA1

a3cab7e0b89d32ce6e4de722d8623010e00d5c1f
SHA256

3a5c0e8623a0380029e7d72b7935f56f5820478ff4eab133c9d1bf4122cd9766
SHA512

832fbd9846f3ae5e17acdb86a6c4455bf4159abfcfaee8d07f5287dcdba484972ef2df1f8947e6c1eb29b09100130429b22c04830865c5e1c8aa2f78d0c54b88
SSDEEP

48:6z+M5BingvvS4JJaqrhdqBHWB5VBOulmIQqspfbNtm:+BbSkJk2tXoIAzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a5c0e8623a0380029e7d72b7935f56f5820478ff4eab133c9d1bf4122cd9766

Files

3a5c0e8623a0380029e7d72b7935f56f5820478ff4eab133c9d1bf4122cd9766
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

/var/hostdir/build/mono-unix/mono/tests/largeexp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ