76973f796795773798c53098891a214641959f77cd9ec799e098eaef75ea0ab8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76973f796795773798c53098891a214641959f77cd9ec799e098eaef75ea0ab8
Size

52KB
MD5

6dedc7e38ad3bfff86ed0a5c041e807e
SHA1

db1cc3656d0bb51169e5e6990fdc7879c894c114
SHA256

76973f796795773798c53098891a214641959f77cd9ec799e098eaef75ea0ab8
SHA512

a65a7626fe10353a923138fc704e27c30a2b0d2ad7dad636610f3fb63cf008ffcd96fe8ae72c1590a11eaea8cac5d9c93d3c11523b9c03e524d48136394b535a
SSDEEP

1536:i9upC5POn1mezgtck9MNyzSALh0R3X64b0:i9upC5PO0y1iLLh00j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76973f796795773798c53098891a214641959f77cd9ec799e098eaef75ea0ab8

Files

76973f796795773798c53098891a214641959f77cd9ec799e098eaef75ea0ab8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\爱茉莉\scan20220119\obj\x86\Debug\scan.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ