faf993bff0d48d9a519aee52189942d46db3e2d009fe8f2913b599c850ff0d94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf993bff0d48d9a519aee52189942d46db3e2d009fe8f2913b599c850ff0d94
Size

2.2MB
MD5

8a48ea969dde6a16a8c90e0ac0818736
SHA1

868bf3e890b0d435aa21db91f3af9f0c3afc2f3c
SHA256

faf993bff0d48d9a519aee52189942d46db3e2d009fe8f2913b599c850ff0d94
SHA512

270496cd1ff403e5798feacccc2511e3b21fa70e706c4f0c8c97285506f25280ba5562c5bed730c0fce11adb157b05a61b5116c1bab3e994ec214b5c904c3672
SSDEEP

24576:0DIChom87zNRv8pnZOWNTe76opC9ogqSbzCNNQoKT1KdUdqcQLCyZg8aW9g5PBcZ:a+zNp6y6P7tQ/VEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf993bff0d48d9a519aee52189942d46db3e2d009fe8f2913b599c850ff0d94

Files

faf993bff0d48d9a519aee52189942d46db3e2d009fe8f2913b599c850ff0d94
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\Desktop\Tooling\PEASS-ng-20240630-b2cfbe8a\winPEAS\winPEASexe\winPEAS\obj\Release\Out\Tango.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ