8b0af26b4905b45c42da908a161124d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b0af26b4905b45c42da908a161124d0N.exe
Size

2.3MB
MD5

8b0af26b4905b45c42da908a161124d0
SHA1

25b7f435a1d705e29e564498e84df3964bedd3b9
SHA256

af5b8c21c5cdbf22f424b35d0643bb3c05d2cbcc0203e9b5bc862c38fb1fccf6
SHA512

9ba9f4fab40b09ff3068159506dc805aafdc6316b5eb65ec49c8a68e485cbf1d134b2f68ac69dfe80a24ec236586666a45fdc94423cd709b57a8f1db01173b85
SSDEEP

49152:xUtAQFxRPfckwQyD9WtBTLItGEAUZVW7n:xQLtm9YBTLItGE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b0af26b4905b45c42da908a161124d0N.exe

Files

8b0af26b4905b45c42da908a161124d0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\justis lol\Desktop\Hello\New-folder\Covenant\Covenant\obj\Debug\netcoreapp3.1\RazorDeclaration\Covenant.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ