a596d344f7fbfabb3840d66dd2247a22028d901068d471d45386624f04d11822 | Triage

Sharing

General

Target

a596d344f7fbfabb3840d66dd2247a22028d901068d471d45386624f04d11822
Size

267KB
MD5

d0a20d0f0667d8b71815449ea599a669
SHA1

86445a7dd617e2e597a6abc2e5e81f02ef249bf5
SHA256

a596d344f7fbfabb3840d66dd2247a22028d901068d471d45386624f04d11822
SHA512

115cf3c8fd315b7409dbf004dde8cd0bc4b7ab9797fc0baab6c8203b32a760aab1753fcd0fda06ff3b8d6f84f5025f56d4f0b00e06d5f35e885df56f3c3e5ffe
SSDEEP

6144:Z0e36QbusS2OcU3jdBGVQ/ELq2VE6VCs0Co1kWdsXtMZ:ajPDMhVVkCo+OU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a596d344f7fbfabb3840d66dd2247a22028d901068d471d45386624f04d11822

Files

a596d344f7fbfabb3840d66dd2247a22028d901068d471d45386624f04d11822
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\H3L\Documents\Visual Studio 2010\Projects\aerotext\aerotext\obj\x86\Release\aerotext.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ