58cf47b4a6103082c15c5a258a3ac047a9edb3cb786635672a6e9e408031267a | Triage

Sharing

General

Target

58cf47b4a6103082c15c5a258a3ac047a9edb3cb786635672a6e9e408031267a
Size

988KB
MD5

62116f71663bcf250e3f398886033f40
SHA1

ac2947abf6fb60777343bc8f40032ce89aa24e5f
SHA256

58cf47b4a6103082c15c5a258a3ac047a9edb3cb786635672a6e9e408031267a
SHA512

de442d3bb2122ffee783c840ffafb34319bb1e69ef4ca52893941026503089a39302c7f0c72e1b871ad2749f65b6c78aa3f2700fde5cb95913fd9c3e7c34d46a
SSDEEP

12288:oHnhuOI0HbUWrXgOJdUWrXgOJLR6cCU6GUWrXgOJ:oYOtHJdHJdFN/HJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58cf47b4a6103082c15c5a258a3ac047a9edb3cb786635672a6e9e408031267a

Files

58cf47b4a6103082c15c5a258a3ac047a9edb3cb786635672a6e9e408031267a
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\phpstudy_pro\WWW\k8s-web-ftp\pha-pla-ana-analysis_distribute\obj\Debug\copyAndRename.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 722KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ