2351d1a61ff6686e7ce16538b59cb9b90d8b35bad925de7130934bfda9a2e9e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2351d1a61ff6686e7ce16538b59cb9b90d8b35bad925de7130934bfda9a2e9e9
Size

993KB
MD5

9cbd8594586a1f9e25f18afd659d77c1
SHA1

90f143b1f80158802f278ff357a0ded03731681f
SHA256

2351d1a61ff6686e7ce16538b59cb9b90d8b35bad925de7130934bfda9a2e9e9
SHA512

d4e0b7cd06f99c7438f0453e0a86a10a2cf5ff5f572cacc349b59ebba8c715a802d9d8954c850bded30513ca405a917c111af940a7aa15f015add217c6bb4abe
SSDEEP

6144:MFCd5F2WAa9OQJOYhWCzh2XoByE6OQOpzb6olWGgAqkAca0xWZsxVTjHepgzkzDz:MFKAWx9JJO4hjmOFpzmnGskAca0x6so

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2351d1a61ff6686e7ce16538b59cb9b90d8b35bad925de7130934bfda9a2e9e9

Files

2351d1a61ff6686e7ce16538b59cb9b90d8b35bad925de7130934bfda9a2e9e9
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Jenkins\myCADtools\01-Tools\TreeManager\01-Sources\TreeManager\obj\Release\TreeManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 841KB - Virtual size: 841KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ