db4ded23b1b3017cfd92784c9a7f3cb512a385849c1f36a18f1d114407cf22cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db4ded23b1b3017cfd92784c9a7f3cb512a385849c1f36a18f1d114407cf22cc
Size

15KB
MD5

66d7e330c4adf5ce710c3f978521fa73
SHA1

03b93e8d80049393d9e5a1fbd8fcb044dc4120f3
SHA256

db4ded23b1b3017cfd92784c9a7f3cb512a385849c1f36a18f1d114407cf22cc
SHA512

c91f12c4eca1730513311680698b9e519328463766497b62112a6f3cc279b85a5e4e136469789a136109f08670b7d3c3aad9303a1d1db7043300dd0123d1b6ba
SSDEEP

384:Qj42oe+ZiJEoEdVLkuOEyQQQQ08Yuxl3mCzYcCeE:QYf0QQQQzzBBzYcCe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db4ded23b1b3017cfd92784c9a7f3cb512a385849c1f36a18f1d114407cf22cc

Files

db4ded23b1b3017cfd92784c9a7f3cb512a385849c1f36a18f1d114407cf22cc
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\a423441.CORP\source\SEDI-Win\trunk\src\rehafact\RehaTools\obj\Release\TestReha.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ