vhcrvdh iobv[.]scr | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vhcrvdh iobv.scr
Size

22.4MB
MD5

e6f4bb8ed235f43cb738447fbf1757c3
SHA1

3204c545dd425de58fc0c56ba60a3de952536f1a
SHA256

6bcc3e6c23017d7246352c2db0eb13bde264a7252a3ec6ae6e44714c1cbbd970
SHA512

27f6b720bef6e9b855e3f10cae73f6aa70820502b84b85060bb2515ba598eedb5566c6012e26e0b25bf62f8b788399eda5649983b3a9058eb3c0b883354fc1de
SSDEEP

3072:fXPXJPPA8XPXJPPzq8p9Lg/gzVgzVgXg/gzVgzVgzlVg/gzVgzVgzlVg/gzVgzVY:/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vhcrvdh iobv.scr

Files

vhcrvdh iobv.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\HP PC\Desktop\vhcrvdh iobv\vhcrvdh iobv\obj\Debug\vhcrvdh iobv.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22.3MB - Virtual size: 22.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ