65f4bd76db547b4cafbbdbad1bf34db249708d8a474a212b1a5a05bd466ba417 | Triage

Sharing

General

Target

65f4bd76db547b4cafbbdbad1bf34db249708d8a474a212b1a5a05bd466ba417
Size

4.1MB
MD5

7895f7cb21d265489995ffbcccae2df5
SHA1

d4656b9dff01b885a6896c488d099bedff5ee724
SHA256

65f4bd76db547b4cafbbdbad1bf34db249708d8a474a212b1a5a05bd466ba417
SHA512

4d04061a15091e94815daa76a0057e8aa6b1da73119370591864f3c21ae71289e54a552d224d0069dbadbd1f0b52a7c94c64df3c92087222c306eb24c6e512f9
SSDEEP

98304:u6iuceU4H/o3l4e5C1hDSlXpqMin7uyWlKieU4H/o3d:4eU4H/o3lXC15YXpqMipWldeU4H/o3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65f4bd76db547b4cafbbdbad1bf34db249708d8a474a212b1a5a05bd466ba417

Files

65f4bd76db547b4cafbbdbad1bf34db249708d8a474a212b1a5a05bd466ba417
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Nikola\Kudos\Projects\falconinstaller\FalconInstaller\FalconInstaller\obj\Release\BitXInstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ