86b4bd37459e0857f760798b64a5165cbabb8d05e3a7675a7510035d51f72153 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86b4bd37459e0857f760798b64a5165cbabb8d05e3a7675a7510035d51f72153
Size

2.2MB
MD5

83bbd957aefffbedca2c289f07c6875a
SHA1

36fa27528d3e2a1257a4ab54f02c80272218d93a
SHA256

86b4bd37459e0857f760798b64a5165cbabb8d05e3a7675a7510035d51f72153
SHA512

aa15bc9d7eb1170feff4bc49289170108990fb6ead302c8d94f0780b804d729e40cdad67a9e744d4c29a8d4736a5fc8505013048db5eae760349772ee3805ce9
SSDEEP

49152:3vUCUEpBCvUCUEpB+vUCUEpBEvUCUEpBsysO/661KXTvUCUEpB:3vUCUEpBCvUCUEpB+vUCUEpBEvUCUEpS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86b4bd37459e0857f760798b64a5165cbabb8d05e3a7675a7510035d51f72153

Files

86b4bd37459e0857f760798b64a5165cbabb8d05e3a7675a7510035d51f72153
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\psnstuff_source\WindowsFormsApplication1\obj\x64\Release64\psnstuff.pdb

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ