0c04e64639cde58906cbbd105a40737d236a1008ee3f5a0a89463c75aaffa197 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c04e64639cde58906cbbd105a40737d236a1008ee3f5a0a89463c75aaffa197
Size

1.7MB
MD5

22aa9226f12b7b5d8f8b30af62c9d846
SHA1

284c91ddb076dc85c4c54f301de7097ed65baed7
SHA256

0c04e64639cde58906cbbd105a40737d236a1008ee3f5a0a89463c75aaffa197
SHA512

ecae2a961c5a53b55b58ff81f54893d4401513ca06038d86dcfe58d55a5a85fb689e2b19fffe5f76bf94bfc47aba09d2a1869fc884ad5c7c1b67c717630406ff
SSDEEP

49152:wd0Ik85pNzmDH86hXS2eQPfzSdQEZn3W2XWx9mf/kx:r85p6H8gSPQUrnG2XWHmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c04e64639cde58906cbbd105a40737d236a1008ee3f5a0a89463c75aaffa197

Files

0c04e64639cde58906cbbd105a40737d236a1008ee3f5a0a89463c75aaffa197
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ngcuka\Documents\V\New Exe Spiker + Btc Clipboard Rig\WindowsFormsApplication1\obj\x86\Release\MainV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ