309e6dbccf460ead71b87e52ccc53b3268ffc41d0fb575c837528824cdf64368 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

309e6dbccf460ead71b87e52ccc53b3268ffc41d0fb575c837528824cdf64368
Size

473KB
MD5

b6689f69bc53f1257fbecdfaa022baa5
SHA1

6c83461b7a6390ff1297b5042075187b4cf7fdbd
SHA256

309e6dbccf460ead71b87e52ccc53b3268ffc41d0fb575c837528824cdf64368
SHA512

7fa9d99662a1e87e3b1ccd4ae72206d37d463870fa59834700d394e418c6cd936eb1349254a52a0990a106a8c38ab0f3b6ba258983050e8a9f9a7fb8203481fa
SSDEEP

6144:RSn9OOGtDSSF64R/NAqAjYi/N8COWbqmSQKEtWtxrq9saJ1tfjOi+Rd9rp:qGZlF6Vq2Yi/CCOyqTQKQgisYjOi+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309e6dbccf460ead71b87e52ccc53b3268ffc41d0fb575c837528824cdf64368

Files

309e6dbccf460ead71b87e52ccc53b3268ffc41d0fb575c837528824cdf64368
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\DEVELOPMENT\PROJECTS\RetailTouch\RTmenu\RTmenu\obj\Release\RTmenu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 466KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ