224152bca129e9e2fedbb927491b4660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

224152bca129e9e2fedbb927491b4660.exe
Size

99KB
MD5

224152bca129e9e2fedbb927491b4660
SHA1

bf04fa0487690f3ca912ee42b819217cb77527dc
SHA256

fa66009035ec94e301b285f1b99a9c7078202f7864e834fd51ae2579ea2603fd
SHA512

b3eeb8cec146b88dc0374e6b6235cc1f9aa8f737afba7731c0bcec0f7f042161708eea61b5d8f5c813f86a8868462dffdc05477f269b10c7e1b4492e94b70ea2
SSDEEP

1536:6ugKOiDjRqmSXSw9lGJZLddqR118qP/LXSw9lGJZLddq:4KOivRqTXZiJZLGRxP/LXZiJZLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
224152bca129e9e2fedbb927491b4660.exe

Files

224152bca129e9e2fedbb927491b4660.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Santosh\My Documents\Visual Studio 2010\Projects\Dreambuzz Information Changer v 1.0\Dreambuzz Information Changer v 1.0\obj\x86\Release\Dreambuzz Info Changer v 2.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ