b4148025da40dd2ccae88b5fba10f7daaae73fb8f039f4b94dbdd8254c785a20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4148025da40dd2ccae88b5fba10f7daaae73fb8f039f4b94dbdd8254c785a20
Size

187KB
MD5

48c284f4473b29eed4fbb01b2a455e08
SHA1

0cd1d4a7303701c0f1759e9092f618190660da18
SHA256

b4148025da40dd2ccae88b5fba10f7daaae73fb8f039f4b94dbdd8254c785a20
SHA512

a30c5f69032317f306fa54391693b9595ddad07fabf7f0f1237a774282542e6c2fd0b6803dce30e47e20c1c972e2e2b65c6487b6677b1f85c3fafc949e831efe
SSDEEP

3072:IpV+1CygrVIlfC7D80pgUO83s9TviIRiv4Cd6zEARG:d1IJIlfagD83sVRIu4AA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4148025da40dd2ccae88b5fba10f7daaae73fb8f039f4b94dbdd8254c785a20

Files

b4148025da40dd2ccae88b5fba10f7daaae73fb8f039f4b94dbdd8254c785a20
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\WJH\Desktop\SweetPotato-master\SweetPotato-master\obj\Debug\SweetPotato.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ