b202c6ec261f8505fbb7710b9dac5004cc93605b5f03182cbe53ceaa6f5c7078 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b202c6ec261f8505fbb7710b9dac5004cc93605b5f03182cbe53ceaa6f5c7078
Size

566KB
MD5

60656fcdbb70b7325b541628641fa44a
SHA1

0bf104f8a33d401aa26a34419a1a9193fefb1377
SHA256

b202c6ec261f8505fbb7710b9dac5004cc93605b5f03182cbe53ceaa6f5c7078
SHA512

605f2257e1494a3cf0a6c1d5ecca8a06a96b9424f0c7ff81ca410c1637c747a197d6e8c85436455692c6aeb6a256b8073707a859bc393363e9095c406797d0bb
SSDEEP

6144:bQGxKKlvCM1LyISGZslwrQGxKKlvCM1LyISGZsl:bQIKEqoLyISGeKQIKEqoLyISGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b202c6ec261f8505fbb7710b9dac5004cc93605b5f03182cbe53ceaa6f5c7078

Files

b202c6ec261f8505fbb7710b9dac5004cc93605b5f03182cbe53ceaa6f5c7078
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\projects\hg\helpcapture\CaptureViewer\CaptureViewer\obj\Release\CaptureViewer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ