e:\Source\Public\Confuser2\ConfuserEx\obj\Release\ConfuserEx.pdb
Static task
static1
General
-
Target
ConfuserEx.exe
-
Size
387KB
-
MD5
4c1e657978a4e3541fc918111fe1cb45
-
SHA1
96e4d1267e188c9038ef77a6a53f8e184e246afa
-
SHA256
25f62aebb3b5b770109f428a4bde2ae5de0c6a7820a4239935df6a011d388047
-
SHA512
27c91d0aa4b017a3e7c2cf05ceb53aea5c6b4fe5bc3ff324c4e31853982d1305c906c1064efed8a0a0def969dc52e07ae9ae8c71bd5aadfa663e85c7a33ae1bc
-
SSDEEP
6144:CCX7SpYHHTBozY8VwaWUdL1w3o6qUjIp6uWd:CxpYHHTObVwaWs+3jjIsuc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ConfuserEx.exe
Files
-
ConfuserEx.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ