ce6293151ddcd095960642ab68fb4d79f5aee400c7a5b507497d269f7d9bc21a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce6293151ddcd095960642ab68fb4d79f5aee400c7a5b507497d269f7d9bc21a
Size

3.3MB
MD5

efcf0311d19c38430b80bf71c62efda2
SHA1

10e7d8bc8588bdc544b951aae04aa36c7cfa0f81
SHA256

ce6293151ddcd095960642ab68fb4d79f5aee400c7a5b507497d269f7d9bc21a
SHA512

56ff52885970a1e06cf1ad1bc19d57a7cd7bb588b496bbaf8a5826ffd072773a00faf1397881dd4c05c5ec7ebf9c373bea8bc40e371fef9b18e11fa86c93b0a1
SSDEEP

6144:ZcLF4fxYpctNZl410UzMq0XXYsAf0XP1zP1vfegng/w38S/d0UZ0lClF1m8SjcnL:ZcWcxxyAscWcxxyAKG2TYurKZljEd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce6293151ddcd095960642ab68fb4d79f5aee400c7a5b507497d269f7d9bc21a

Files

ce6293151ddcd095960642ab68fb4d79f5aee400c7a5b507497d269f7d9bc21a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\_NET_2005\INPS_UniEMensIndiv\UniEMensIndiv\obj\Release\UniEMensIndiv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ