6b72e2af6e1844ab5fe489839d191e1d6cc64859be8f99357d27246532c5d820 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b72e2af6e1844ab5fe489839d191e1d6cc64859be8f99357d27246532c5d820
Size

5.0MB
MD5

6a66e65f26818638be095151e54659c4
SHA1

46e6adf60ffbcd89275a12004d6a9a3e3ea06da9
SHA256

6b72e2af6e1844ab5fe489839d191e1d6cc64859be8f99357d27246532c5d820
SHA512

01f41b7b50d6e60a0ba94590e89504cf89254d66d9f6bd2a728f8d96fd35052e5a15aa258bcaf32050812b28101094e0db3f7695a72c0ba1f2fdf0746086eec2
SSDEEP

98304:oQz+04D+i4DBz2NHlruSSDllNmd+5z/Le7q2:oQS04D+i4DZmLclKez/Lkq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b72e2af6e1844ab5fe489839d191e1d6cc64859be8f99357d27246532c5d820

Files

6b72e2af6e1844ab5fe489839d191e1d6cc64859be8f99357d27246532c5d820
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Owner\デスクトップ\MrsMajor3.0\gdifuncs\obj\Debug\gdifuncs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ