94559a7c0588499948e050343a5319d1b80a26df280e3bb76c5ffc2f3b3620c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94559a7c0588499948e050343a5319d1b80a26df280e3bb76c5ffc2f3b3620c6
Size

12KB
MD5

7a40f746a86b526fe69901ef638250b7
SHA1

384808332021854e10c013553a04e8689ac77949
SHA256

94559a7c0588499948e050343a5319d1b80a26df280e3bb76c5ffc2f3b3620c6
SHA512

385ff73eb97d9b9c122166a8175edc501b8129e07e117dfa94d6aa34971a2333988a3201be587f059a99402c6c631bc2cb33b8f2db5df208c9dfa6b07e1c905f
SSDEEP

192:qq92FA0eQktHRMlWYrnzo5/AD3fppyAx1B/1I6SUbXl8tp4Y8TIUMSfttO:qq9meQktHR9sfpprF1zRXeWDEW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94559a7c0588499948e050343a5319d1b80a26df280e3bb76c5ffc2f3b3620c6

Files

94559a7c0588499948e050343a5319d1b80a26df280e3bb76c5ffc2f3b3620c6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\ADO.net Exaple\ADO.NetAssignments\EmployeeInfo\EmployeeInfo\obj\Debug\EmployeeInfo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ