324c130de01b79f242f0e24dcc1902f8638e997bea979a2fdf752f4a4fc1d951 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

324c130de01b79f242f0e24dcc1902f8638e997bea979a2fdf752f4a4fc1d951
Size

243KB
MD5

d6ecdcab90f1a8ea3db94f34142858a2
SHA1

2ae745813b0e2f44d421fd7018fa9bd3359a93a5
SHA256

324c130de01b79f242f0e24dcc1902f8638e997bea979a2fdf752f4a4fc1d951
SHA512

b6d8650b5a0a9ce51b8291151144ce63e4ea93a8728d899e6efe97d1ab6a64c95dfad847e1aea793536cb378993826a81fc0c208beb0fdd5e16f434e006b2ecb
SSDEEP

768:0M4unk/FYYfuAMq6TyothZGGGGGGGGGGGPHypMrHNF2xRH+fA0wDtk4NSOSA0wD9:5QV6GolEtF2zefNwD2NwD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
324c130de01b79f242f0e24dcc1902f8638e997bea979a2fdf752f4a4fc1d951

Files

324c130de01b79f242f0e24dcc1902f8638e997bea979a2fdf752f4a4fc1d951
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ithas\source\repos\yes\yes\Noob Haxx\obj\Debug\nutfuck.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ