b268cc7de0ae77ef5d0e4ca2a9625439e3be645c83e952f3169b90892c9a8609 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b268cc7de0ae77ef5d0e4ca2a9625439e3be645c83e952f3169b90892c9a8609
Size

429KB
MD5

ab68cfd270bd8ad16869d152fd389899
SHA1

28fa1aa5624c9503d763afee9bf7cfb6c04e1c38
SHA256

b268cc7de0ae77ef5d0e4ca2a9625439e3be645c83e952f3169b90892c9a8609
SHA512

38bc782e07920565595a95f3dd85c2bc85e43dd254fafcd547d9afd3ec3e592f1551b546715164f35eb851d564e1a835df6cd5daeb0de815ff6d43bb314e9345
SSDEEP

6144:zzQjfpxTtrCHs9nA8H03/Vhf5oBIxAjiQsHpxWtrVHs9nA8H0I/Vhf5:z7LNF5JejR8NF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b268cc7de0ae77ef5d0e4ca2a9625439e3be645c83e952f3169b90892c9a8609

Files

b268cc7de0ae77ef5d0e4ca2a9625439e3be645c83e952f3169b90892c9a8609
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thisi\source\repos\TraCuuTrungTuyen\TraCuuTrungTuyen\obj\Debug\TraCuuTrungTuyen.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ