4faae03eaa39746b12e8440478f9309127bec1bc2ea75f16442d2d5bc159f547 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4faae03eaa39746b12e8440478f9309127bec1bc2ea75f16442d2d5bc159f547
Size

960KB
MD5

38aca309e62ce39df72da361ce04a2b2
SHA1

52fa81f695bf8988a18298cf0956210e8683f620
SHA256

4faae03eaa39746b12e8440478f9309127bec1bc2ea75f16442d2d5bc159f547
SHA512

e4144750f9f120b750c6bab5626996df495a087f8f949bf2a7ada40cda3d4d7566eee12361a486a10b792ab9037f9efa393b5c4886682f176e4f78b738bf6507
SSDEEP

24576:wrMwhsg4nQwAcxhxD+gWGNZFZc6kNGYgzzAlTgNJPAgCgs+mRHegtW/HI8/AXI58:wrMwhsg4nQwAcxhxD+gWGNZFZc6kNGYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4faae03eaa39746b12e8440478f9309127bec1bc2ea75f16442d2d5bc159f547

Files

4faae03eaa39746b12e8440478f9309127bec1bc2ea75f16442d2d5bc159f547
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\git\SE_Fidessa\source\CounterpartyLimitsMonitor\obj\Debug\FidessaSessionTracking.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 957KB - Virtual size: 957KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ