b1079e278ee036ad61221b7dcaec3de2743378385553938da17f9b74361ece51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1079e278ee036ad61221b7dcaec3de2743378385553938da17f9b74361ece51
Size

2.5MB
MD5

8ce355952d27e46507ff5925a3ef1a5b
SHA1

739fa2a9f167b98633b8aa750b425e483341819f
SHA256

b1079e278ee036ad61221b7dcaec3de2743378385553938da17f9b74361ece51
SHA512

bd109353f89d53468388d17a3ae340c72e1cbc9fa741d21af4567bda1ea9c5a5cc1db56c0308e964f02a647f885912fcb70776a634e68d741ad4e2ca24634955
SSDEEP

49152:vHUbabmW/8NoIFuj+exCvcIjfs/fBbUc489LNO9LNzV:vHUbabmW/8NoIFuErs/fZSAZqZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1079e278ee036ad61221b7dcaec3de2743378385553938da17f9b74361ece51

Files

b1079e278ee036ad61221b7dcaec3de2743378385553938da17f9b74361ece51
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Leifuse\VBNet 2015\NXGLOGIC Explorer - CrippleWare Standard Edition Free\Explorer\obj\Debug\NXGLogicExplorer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ