fff3460ec1eb85b5239594f28758d903d3a0d24e6dabfd668c486e9c5af0cdab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fff3460ec1eb85b5239594f28758d903d3a0d24e6dabfd668c486e9c5af0cdab
Size

1.6MB
MD5

3da979e729f5d97fdaf88d05a4e92b3e
SHA1

e9040ce3fb31f4f42faafb07947564417dbd627b
SHA256

fff3460ec1eb85b5239594f28758d903d3a0d24e6dabfd668c486e9c5af0cdab
SHA512

d4ce004fbffe7c827b78ef5a77aca3834703586fcd4a8d7d6a84cdae729e75960b38ce1ed5ebf643cb9586fbab1cc2541a97ac47f4cd5a41c92398fd36629742
SSDEEP

12288:0CPokvC+t5wyvt3pK0FL4JOGjEjFJK9oCCMIMrZl5v6/2DmMpf8oezfLeo8o0FhC:2gC+THt3fFL4cjWnenN8o0Fxry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fff3460ec1eb85b5239594f28758d903d3a0d24e6dabfd668c486e9c5af0cdab

Files

fff3460ec1eb85b5239594f28758d903d3a0d24e6dabfd668c486e9c5af0cdab
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\NormalSrc\SL_Fix - 副本\mhsl\obj\Debug\mhsl.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ