ConfuserEx Dynamic Unpacker[.]exe | Triage

Sharing

General

Target

ConfuserEx Dynamic Unpacker.exe
Size

49KB
MD5

4fc1994376f19d74ee439bbc09c437fd
SHA1

65c8ed1bbaee682499d7521caab6f75ce5e9cb95
SHA256

800f93976372ef90d46d847b7aae1bc379a98c6088eb222a966ae0601f98e724
SHA512

e4733e737c4fd7b0d551fea9a008331dc995848c28cc1c5f5f2e489240505ae71acdc210d2c64ff1d3ebb615401ef17f0b472508e47295aa5fe6bd26a95b3f6c
SSDEEP

768:DfX2VOzb1zoSwitap+UDdBlIema6IkqjzJxvDWrWaaxpk9I3b19C0KRlZcDt:LX2MzCpFDWe96aJxLWr2h3b19ChRlZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConfuserEx Dynamic Unpacker.exe

Files

ConfuserEx Dynamic Unpacker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\123\Desktop\ConfuserEx-Unpacker-master\ConfuserEx Dynamic Unpacker\obj\Debug\ConfuserEx Dynamic Unpacker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ