085f004d9884be5b5cb119c4607503264ce94525f9be314af6f78a9307fdf25f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

085f004d9884be5b5cb119c4607503264ce94525f9be314af6f78a9307fdf25f
Size

456KB
MD5

0c10b83216b67a4c9fc7ff73856a2e95
SHA1

38ee69fd4e13146d0027b5a1e707163aa8cda70c
SHA256

085f004d9884be5b5cb119c4607503264ce94525f9be314af6f78a9307fdf25f
SHA512

0f2942c0cbb21f43d1cbf56aab579ee0a7616b97ea0fc32f7126fe03af4e102f1a57c9589a3e793ddb2009c139d99210e464c1b9464016337e70a8b3e40510ec
SSDEEP

6144:A+76FhmSAW2MqroxBOfYJFj9Go2M2B0FyoFyYFyYFyCSFyCSFyjFp4/qcAm:AhqrqOfYYSFvFHFHFXSFXSFNic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085f004d9884be5b5cb119c4607503264ce94525f9be314af6f78a9307fdf25f

Files

085f004d9884be5b5cb119c4607503264ce94525f9be314af6f78a9307fdf25f
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Code\GentisDemo\GentisDemo\obj\x64\Release\Out\GentisDemo.pdb

Sections

.text
Size: 454KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ