42dd6aeee394e298646701ebe1fd611186ea4ee8c7e6383913db121444635944 | Triage

Sharing

General

Target

42dd6aeee394e298646701ebe1fd611186ea4ee8c7e6383913db121444635944
Size

12.3MB
MD5

acadbe83c09a7a9b8213a662eda12e93
SHA1

26a6e55076bc0602ff9060ac529528f3fc631986
SHA256

42dd6aeee394e298646701ebe1fd611186ea4ee8c7e6383913db121444635944
SHA512

a7ad3777e4a5ae9dd8dd09cff3a3ab498c6d2dc5b922407c48936225cb0c91430f75114f46b0a7b39046dc45c26221e199d33ff0bce105e05e903eef7fbdcd9f
SSDEEP

24576:3d0KaJXJ/N/q0L1akqaaUltFxBvT4fGzvpYOrYsF0KaJXJ/N/q0L1akqaaUltFxP:SRXSqqaaUGRXSqqaaU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42dd6aeee394e298646701ebe1fd611186ea4ee8c7e6383913db121444635944

Files

42dd6aeee394e298646701ebe1fd611186ea4ee8c7e6383913db121444635944
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\humayoon.sajid\Desktop\upw\sdk\Dropper_SDK_4\ProctorU\obj\Release\ProctorU.pdb

Sections

.text
Size: 12.1MB - Virtual size: 12.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ