Temp (1)[.]exe | Triage

Resubmissions

02/06/2024, 18:45

240602-xd5xpacb93 3

02/06/2024, 18:44

240602-xdjz8acb77 3

Sharing

Copy URL Twitter E-mail

General

Target

Temp (1).exe
Size

506KB
MD5

d6733a239ba8c00ccffd6f2d0b138b90
SHA1

8df7c5b8a5b22015be7a2e43e9895911ae00bafc
SHA256

1b2c4070795e9e3c625af3bfcaeab7a636fffe09d978f6c63c69851db879d44f
SHA512

cc451316fee39b5932984a63f5da9f028dccfddb7cf8f2f47e7e24ea00bf2abde3d239aa609cb3ec841bdf1d4c2e0612875f468515f3f693cc9ece293cf7b1f3
SSDEEP

6144:OObq1wbsUCZ4cyL8IL6ZE14Doq3/3coFEwaPqfvhiCGhPQHhiA5Ju8FXO2kNk1yY:0i7z473/3cawyhgy8AzQB98PfjOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Temp (1).exe

Files

Temp (1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ex\Desktop\ub.gg perm remake\WindowsFormsApp2\obj\Debug\WindowsFormsApp2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ