b7d8c7477f5d71b3c8668df862aa3b50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7d8c7477f5d71b3c8668df862aa3b50N.exe
Size

275KB
MD5

b7d8c7477f5d71b3c8668df862aa3b50
SHA1

b993121de5e2e02b1245eced0276d4fbbf033bcb
SHA256

acc206a751591d07ee53d646204dad4df021130ac04dafd5e2f8556028c76582
SHA512

d2954bb7fdf8931ab17b5e667160e85bb8a865b6aadc0c2dfc87c12b57b4c713f70749aa678101756043757ffe658045a132e5f734605061c43c4d96d02b4728
SSDEEP

3072:1if4iKiWCdNCNFS8G3yrMCd4mZmre+xSy3pPT5ztttttk0Na12yTT0kBweFp2bXv:1iKoNCi8G9o1mC3G5C0N1mokBwSpM36

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7d8c7477f5d71b3c8668df862aa3b50N.exe

Files

b7d8c7477f5d71b3c8668df862aa3b50N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/build/obj/Velopack/Release/net8.0/Velopack.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ