79db9245acb9d923e1d3ff35c9664046366c431cb6253158c0fdee5119655a44[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79db9245acb9d923e1d3ff35c9664046366c431cb6253158c0fdee5119655a44.exe
Size

8KB
MD5

13aaf1bfb78d9e44dcbc12a6ea0a830a
SHA1

83b79c6f0c9829c36531b5a57ba0880799518a16
SHA256

79db9245acb9d923e1d3ff35c9664046366c431cb6253158c0fdee5119655a44
SHA512

02eb123901bd9479ff1188e5c3146f9febaadb352353284f2a5f36baa02724b8e29761886644dbea169b3c6babd6c9e5b8a1348d79f14ca4ef12ecfb82ba82c6
SSDEEP

96:KYHPLyAHWmja3JagLVI6Qqg8z0Ty167qoSV0SepEw0mvzNt:SmjaZL6fBa0Ty1tZV0S3w5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79db9245acb9d923e1d3ff35c9664046366c431cb6253158c0fdee5119655a44.exe

Files

79db9245acb9d923e1d3ff35c9664046366c431cb6253158c0fdee5119655a44.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\source\repos\tupian\tupian\obj\Debug\tupian.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ