datcI6A[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

datcI6A.exe
Size

31KB
MD5

961324c0ebf9414318fbe3a48a6a50ac
SHA1

de72499225d9a22dca05425375eaadc6dace865b
SHA256

e35b80d3f2ba8385e2ffb8bac4122c5045ca2a14b3a616ecefb50050602a5cf1
SHA512

e5b5a8dfee87502520126fab3eee6a93d71e9d3b9ce8cfba8cdf6ffe1db05d83d05f9538bc39d979e400b205d9453c9ebe943eaceae61b1509b4ccc5c1366cd7
SSDEEP

768:BOAPds/+zOPjV1nXgpibE56VyZSIFiQ2wVBGB4bSQxn79:IA6J7XgpibEIyII12mBGB4bSQxnp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
datcI6A.exe

Files

datcI6A.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\veron\source\repos\RoHacker\RoHacker\obj\Debug\RoHacker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ