17979857255e2e471fc0951c84f057ca3c34c7b1d2e2def1e4f8b89440895a9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17979857255e2e471fc0951c84f057ca3c34c7b1d2e2def1e4f8b89440895a9f
Size

1.9MB
MD5

ccbe3b07c607304142961b1231aa0c90
SHA1

2146a75a609c43295b9b5784e964d96a29a73326
SHA256

17979857255e2e471fc0951c84f057ca3c34c7b1d2e2def1e4f8b89440895a9f
SHA512

e1a65f0a899f5be43c9ef4d873cc524e146aeb08b2275f530269eea6fb6056e9759ffd244d427395ed54d7365a3c75f064a5031f4c47327aa2955216c725f8fa
SSDEEP

24576:+UwhJE8irkaRJLPfe/JZ1LG0q/+U27S5blzzw5WonwJLEhEghVmVvGWe6:3783aRJrfp0KGWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17979857255e2e471fc0951c84f057ca3c34c7b1d2e2def1e4f8b89440895a9f

Files

17979857255e2e471fc0951c84f057ca3c34c7b1d2e2def1e4f8b89440895a9f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Projects\15.2\BuildLabel\Temp\NetStudio.v15.2.2005\OutlookInspiredAppDemo\DevExpress.OutlookInspiredApp.Wpf\obj\Release\DevExpress.OutlookInspiredApp.Wpf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ