f6776fb38f676e79670ea0c31173635f2d28802f17dff0fe22738f03dafe6310 | Triage

Sharing

General

Target

f6776fb38f676e79670ea0c31173635f2d28802f17dff0fe22738f03dafe6310
Size

4.0MB
MD5

46a0b09733542c8bd29e99b3da8b6980
SHA1

ffe0339be2a455e0b1ea521789b1ebc36f59894b
SHA256

f6776fb38f676e79670ea0c31173635f2d28802f17dff0fe22738f03dafe6310
SHA512

ad7ec8bcb1e73fa10816113beb77991c7dec64d86d280951ab64b9af2f18a2d3c0d0fae888594fe042977a6e3567ea88ebf645f9819141c8bd09b9ffdd1ae887
SSDEEP

98304:OasE+5aPylNqFmbj168biFAvuLIRD6PYJ/:Oo+UPylLvNvTh6Pa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6776fb38f676e79670ea0c31173635f2d28802f17dff0fe22738f03dafe6310

Files

f6776fb38f676e79670ea0c31173635f2d28802f17dff0fe22738f03dafe6310
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Denis\source\repos\Gantur™\Gantur™\obj\x64\Debug\Gantur™.pdb

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ