3634d645b734a9685b6d7f222ca14a548a20d8edde98c0feea2318f1f14c9e21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3634d645b734a9685b6d7f222ca14a548a20d8edde98c0feea2318f1f14c9e21
Size

107KB
MD5

a30a1f3c5a0526f688268daca587ca77
SHA1

e4f6d21eb04d71a533ad89d54a6de124ebf2df6d
SHA256

3634d645b734a9685b6d7f222ca14a548a20d8edde98c0feea2318f1f14c9e21
SHA512

0682f4b8c099c84173a01e58ff359db9d262d79223e5be9d216e7db55d2115ec454c09cdb909e1f9995a4b3d51c91fd8cc777b9d031c0a41133c54318a9d1ca5
SSDEEP

1536:gVz3scoM4NWM+iK5zor5vKa114idACf7GBoK6taYVUSZE0SWOip611:885BHPAbewSZhp611

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3634d645b734a9685b6d7f222ca14a548a20d8edde98c0feea2318f1f14c9e21

Files

3634d645b734a9685b6d7f222ca14a548a20d8edde98c0feea2318f1f14c9e21
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Cris.Negoianu.RXSYSTEMS\My Documents\Visual Studio 2008\Projects\AttendanceRegisterCore\AttendanceRegisterTestHarness\obj\Release\AttendanceRegister.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ