59638c2fc885bc6000e61e8977f35bed660ae5d7950e48e9e3e76c17d988e93b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59638c2fc885bc6000e61e8977f35bed660ae5d7950e48e9e3e76c17d988e93b
Size

671KB
MD5

8fa6244971f4dcfda6a6c00207e3cdca
SHA1

0d19795352f7da3a78705dba1d663b60f7cfac57
SHA256

59638c2fc885bc6000e61e8977f35bed660ae5d7950e48e9e3e76c17d988e93b
SHA512

3b666e67c630d61e28a8d8f4b8cf98f3d77d86945a6be3bf8d6004831becefb7878b8d99b6c974c65e2d931bf5266d9ccf5abec975732e976a449d9cce39f7cb
SSDEEP

12288:w736Y65WDbX5nGWXQbrwLKufLpgwch5LcnpYiN8lOAU4PLZfgTnPfHmDNy:0I5inpocLK+pU5InS/OApTKTPfGZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59638c2fc885bc6000e61e8977f35bed660ae5d7950e48e9e3e76c17d988e93b

Files

59638c2fc885bc6000e61e8977f35bed660ae5d7950e48e9e3e76c17d988e93b
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\may\31\NAM\obj\Debug\NAM.pdb

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ