4ab6c1e683a06f83112a02b0461f8dd9eb4e86f4072c9888abba79c1c999eae8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ab6c1e683a06f83112a02b0461f8dd9eb4e86f4072c9888abba79c1c999eae8
Size

3KB
MD5

2978eff6d6cdebb4e2e03b003f27f808
SHA1

4e3b47888ab217b4f9c1187f085c9f6d28cb87fd
SHA256

4ab6c1e683a06f83112a02b0461f8dd9eb4e86f4072c9888abba79c1c999eae8
SHA512

b323ef4f083bd8837bd9fec18ae7945f22d7ffc2828bce76e0fb287022dfa8c4d89e9f5fe61841537a07a9c01b19bad9430b34b4c46b77124a2c4dea965fb765

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ab6c1e683a06f83112a02b0461f8dd9eb4e86f4072c9888abba79c1c999eae8

Files

4ab6c1e683a06f83112a02b0461f8dd9eb4e86f4072c9888abba79c1c999eae8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\Elias\Documents\Visual Studio 2017\Projects\App1\App1\App1.UWP\obj\ARM\Release\ilc\intermediate\ILTransformed\System.Runtime.Handles.il.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ