90798ca6ded256ba53a8022a41db822e0ff47414531daadea75546f86335e6ed[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90798ca6ded256ba53a8022a41db822e0ff47414531daadea75546f86335e6ed.exe
Size

149KB
MD5

e4e040a71b3871e3b5929e257403b755
SHA1

617efd5066936dd4389e3b8a52b73e1082a12ecd
SHA256

90798ca6ded256ba53a8022a41db822e0ff47414531daadea75546f86335e6ed
SHA512

20b360d5ccd40720c3a3dacf633bd0698e33f1188e7883ed2d3986d797701e948c368626f2df09cdac98b2abf537102104a202f61be2a71c74cb95c16387dbf5
SSDEEP

3072:bsn0qsXB+4148eyLN09/3zN1f8etLN0MjqqU:bsnjl4GsN0zhFN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90798ca6ded256ba53a8022a41db822e0ff47414531daadea75546f86335e6ed.exe

Files

90798ca6ded256ba53a8022a41db822e0ff47414531daadea75546f86335e6ed.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Denis\Documents\Visual Studio 2019\Projects\IFSklg\IFSklg\obj\Debug\IFSklg.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ