532674b4eb5ba3132eeb136c05d4ed19a9793370c75436d2e8ca9a564e43d3a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

532674b4eb5ba3132eeb136c05d4ed19a9793370c75436d2e8ca9a564e43d3a2
Size

12KB
MD5

e53490dc54992cc52a8d7cce073f781a
SHA1

0af60671421435deae4af0753d5f1e30f937cdb0
SHA256

532674b4eb5ba3132eeb136c05d4ed19a9793370c75436d2e8ca9a564e43d3a2
SHA512

35f4e47227cace338dae54463c533749ccac1a006177b2a74dd3171dae353bb7a48e31b5ebae6177709979ce730863dcd79cc6b62406d24aadc442ee124fcf8e
SSDEEP

192:rcx0WHAqa1Rl+dNziLqvCUj9hlIfOuo3N/VM1nRKR2T:U01H+dNmLqqUj936O5xCdIR2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532674b4eb5ba3132eeb136c05d4ed19a9793370c75436d2e8ca9a564e43d3a2

Files

532674b4eb5ba3132eeb136c05d4ed19a9793370c75436d2e8ca9a564e43d3a2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Andreas\Documents\Visual Studio 2012\Projects\Spammer\Spammer\obj\Debug\Spammer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ