08421[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08421.exe
Size

11KB
MD5

ba25ac8db4bf0d5780367a6b9f2d556f
SHA1

8bfd376384161b32c3b1a977da84aa5abe58518b
SHA256

296fefbf9299c77c43961139d6fc400dacfd2733522416bca3a464000dad270b
SHA512

ea73b1e44ab2d2ae3e034ff36582d56b68f66c91d7f4f8d2c7f90b7f3c5f2ef8963735503c891eb0771bdcb2ed1e010afbe11163f0c2b4f1825d910ec447b8a3
SSDEEP

192:AF2fDsHfz0MZfmH0peEV6lnX15GbUrcuE7tf4vgVn4Gfe0D6:dDsHLnIEeegTGb6cuE7tRV7frD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08421.exe

Files

08421.exe
.exe windows:4 windows x86 arch:x86

Password: e

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Loser\source\repos\08421\08421\obj\Debug\08421.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ