ddf1f5d2d231446584aa72fa2950e2c0fae6e869c32972db17d28e36fba91b18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddf1f5d2d231446584aa72fa2950e2c0fae6e869c32972db17d28e36fba91b18
Size

229KB
MD5

affbed28fe72b68ceefcfbd4dce9c420
SHA1

459c623b41dc8fa725add063db6e531fe495c39f
SHA256

ddf1f5d2d231446584aa72fa2950e2c0fae6e869c32972db17d28e36fba91b18
SHA512

505ee77ef79826640d902b1d3814558a02d43676eb711f5ff5c82d66d14e448eeb3f18e62eb4e027c07770a508b251fb772a21815ca41154f751ab84778c3908
SSDEEP

3072:MD6fCiyuPS8t91qgZYML4/r6FCyyP5jz7ggIlI5ONAChne9/uFxmjbpFvB5JBqlV:PfCifq4VE/r6ET0NAm8vB5bqlMCKVbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddf1f5d2d231446584aa72fa2950e2c0fae6e869c32972db17d28e36fba91b18

Files

ddf1f5d2d231446584aa72fa2950e2c0fae6e869c32972db17d28e36fba91b18
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\code\app-player\hd\Source\LogCollector\DotNet\obj\Release\HD-LogCollector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ