76d1b60ade1854b6fce523b0f635f70f2c3a9c20749f2e1b1189602a99810ae3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76d1b60ade1854b6fce523b0f635f70f2c3a9c20749f2e1b1189602a99810ae3
Size

734KB
MD5

0d1abae1514b5fc19354ec221015cbad
SHA1

d157eeb604538989910d6d8083cdf7232f1292d3
SHA256

76d1b60ade1854b6fce523b0f635f70f2c3a9c20749f2e1b1189602a99810ae3
SHA512

d01c56c2709730aa1e78865112256c7d180eedb78dc158d9097564394efa28eddcdaf12be12944f1cf789d4e228955457626570ddcc2d796c030aae59115d6ac
SSDEEP

12288:l8gigWb5TEPDPvV+QyqFYWnwH7vDWmjkwLl+O8gigWb5TEPDPvV:E5TsoQnFHwHzapulS5Ts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d1b60ade1854b6fce523b0f635f70f2c3a9c20749f2e1b1189602a99810ae3

Files

76d1b60ade1854b6fce523b0f635f70f2c3a9c20749f2e1b1189602a99810ae3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\L3K0T\Desktop\TibiaGiniusApp\obj\Release\net7.0-windows7.0\TibiaGinius.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ