41f9913407ab449a36660ba6df9946a075f1bc6a3eb8e959ce8d9394ebcb189b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41f9913407ab449a36660ba6df9946a075f1bc6a3eb8e959ce8d9394ebcb189b
Size

984KB
MD5

052cf0c1502e541dba75f7b63b71bfd3
SHA1

19fc458f3df2db9dad733a335b55954f29067d0a
SHA256

41f9913407ab449a36660ba6df9946a075f1bc6a3eb8e959ce8d9394ebcb189b
SHA512

fab4767cb1d04bb6bc12945d17306d10551ad255d349ddabaf97a1c2fb304ef5a7a265c13c03ebc29f0c8876dd6cf952d8dd6e4db7481262876772e0411c5ec7
SSDEEP

12288:+vB8HbUWrXgOJdUWrXgOJLR6cCU6UUWrXgOJ:7HJdHJdFNpHJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41f9913407ab449a36660ba6df9946a075f1bc6a3eb8e959ce8d9394ebcb189b

Files

41f9913407ab449a36660ba6df9946a075f1bc6a3eb8e959ce8d9394ebcb189b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\phpstudy_pro\WWW\k8s-web-ftp\pha-pla-ana-analysis_distribute\obj\Debug\copyAndRename.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 718KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ