577b65bc7c3b94f3de7370e4671ae18b4c55dfc13092cfc53192b017d7542f94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

577b65bc7c3b94f3de7370e4671ae18b4c55dfc13092cfc53192b017d7542f94
Size

608KB
MD5

9760cbd874fb360ca62a9aa106b9ae2e
SHA1

89d37e650c28cb78f516f22a0d69b2d8b0f413d9
SHA256

577b65bc7c3b94f3de7370e4671ae18b4c55dfc13092cfc53192b017d7542f94
SHA512

65f6fe565e36cc963975b1f44939b2dd98d0bf9ef5571e8b73a06dfa66bd4a46c13c455d54ba3f565de6276e546a918b8391e89fd17fb8bda2558a08d2280313
SSDEEP

12288:0oelOiibd7s/ptB0NDZ7IdIP8t38M1lpV1pLM21f2LjCjQfb1x8M:0nOiiXF7IdhpFhOXCUb1x8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
577b65bc7c3b94f3de7370e4671ae18b4c55dfc13092cfc53192b017d7542f94

Files

577b65bc7c3b94f3de7370e4671ae18b4c55dfc13092cfc53192b017d7542f94
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\may\31\NAM\obj\Debug\NAM.pdb

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ