2024-05-26_74098bd1df8d5a57ae4b5911f9a05901_hiddentear | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-26_74098bd1df8d5a57ae4b5911f9a05901_hiddentear
Size

207KB
MD5

74098bd1df8d5a57ae4b5911f9a05901
SHA1

287052b07ebce84eadee960cfdf0cb15dc99263c
SHA256

a7e91f5b8de2fd203d23434ac805987e49d2c19e63c3449c9366e86480b12a2b
SHA512

014482a85f9966d1fc756811b25181d468859ed84c3e896c802e73e76f418a74cce72ecfa934c6090ace9249d309f544c05986ad35af721721db97b9af248955
SSDEEP

3072:UrM+lmsolAIrRuw+mqv9j1MWLQNgVM+lmsolAIrRuw+mqv9j1MWLQU:3+lDAAOH+lDAAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-26_74098bd1df8d5a57ae4b5911f9a05901_hiddentear

Files

2024-05-26_74098bd1df8d5a57ae4b5911f9a05901_hiddentear
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\GitHub\hidden-tear-master\hidden-tear\hidden-tear\obj\Debug\Adobe.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ