71044d43ee3e60040ced03342e248cb920693bb01b286c839917cb875e5561e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71044d43ee3e60040ced03342e248cb920693bb01b286c839917cb875e5561e2
Size

656KB
MD5

df7e6cbddc355b9944dd79ca98c15663
SHA1

d0756c6a07681e1d5cee1d1af572c4fd59fe1d3b
SHA256

71044d43ee3e60040ced03342e248cb920693bb01b286c839917cb875e5561e2
SHA512

9ad4f6473ad01d6e60ed7fe8a83b99b00b38fbb546895f83e0380fedec0430b8f12904fb853b05029f59599c271d22684b1917fb1ba854990055122230354272
SSDEEP

6144:1nu/cYvFUCyxgmcrGKyklbFoYkfvqZmlzFMA69rw94Da9pQ41EizfI:1nGc6jnlXossLQ41ZzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71044d43ee3e60040ced03342e248cb920693bb01b286c839917cb875e5561e2

Files

71044d43ee3e60040ced03342e248cb920693bb01b286c839917cb875e5561e2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\src\VisionOne\OneMobile\trunk\WinForm\obj\Release\BusMobile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 651KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ