b325ac8b3389a2617082fc62c9e9ac340e6ea65a14548f8e5e0d1ec3940d4bbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b325ac8b3389a2617082fc62c9e9ac340e6ea65a14548f8e5e0d1ec3940d4bbe
Size

126KB
MD5

5aedef31799332ccd9d9d748afa930af
SHA1

09d5aaa97c9612c05914d1e110b3f74564f5b19f
SHA256

b325ac8b3389a2617082fc62c9e9ac340e6ea65a14548f8e5e0d1ec3940d4bbe
SHA512

99e3a7e4d564d8e5508e11ad3992ee1c8f22280a4e4031b894555b563b1175b02a74e89cef922365555806a8e015049d046ada33a3b27e125fba6e575342e1ca
SSDEEP

1536:NyDYNApuwnRCDKXKFam5v7GET4oBtp5sSFJPYxT368TydNNR:vNkuwngDKJyGET4Op5sSFJE368T8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b325ac8b3389a2617082fc62c9e9ac340e6ea65a14548f8e5e0d1ec3940d4bbe

Files

b325ac8b3389a2617082fc62c9e9ac340e6ea65a14548f8e5e0d1ec3940d4bbe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Source\workspace\NETGEAR-LPC\UserSwitch\obj\Release\NetgearUserSwitch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ