19466f260227691a1af0adef0a9346f9ed1e1e4b525679c6ea0f40ac0d40f5b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19466f260227691a1af0adef0a9346f9ed1e1e4b525679c6ea0f40ac0d40f5b3
Size

24KB
MD5

7eef45d94b9fb8e22b4c3335da9ec360
SHA1

bdcad8b7a55f61143a527dc8d3a65b41adde104d
SHA256

19466f260227691a1af0adef0a9346f9ed1e1e4b525679c6ea0f40ac0d40f5b3
SHA512

e67a0a24905d61ffa94acbbb71154d53df2d0ae123184d0ddd4ef0a1d22bb4318785711230c0bb5f2ac5368978cd555d728104b8e2fb1a8392a2a81e37b1c518
SSDEEP

384:CTN9+qn7Y0qc2cIm3xoQnrbNDSuBJcOWHjIsBg2aDJhnp9f:aCWhD1YBgdDJX9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19466f260227691a1af0adef0a9346f9ed1e1e4b525679c6ea0f40ac0d40f5b3

Files

19466f260227691a1af0adef0a9346f9ed1e1e4b525679c6ea0f40ac0d40f5b3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\caki\Desktop\distributed\RemoteClient\obj\Debug\RemoteClient.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ