fd30013ddd8def745a70fde383914ba263097e747615fb9ef9a761f695519e5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd30013ddd8def745a70fde383914ba263097e747615fb9ef9a761f695519e5b
Size

7KB
MD5

41efd1226e3480c33a31991349569d20
SHA1

d99158ef836b155c6525d8f29b9069d55b9dfb92
SHA256

fd30013ddd8def745a70fde383914ba263097e747615fb9ef9a761f695519e5b
SHA512

f230730294fab1668a43787a00b7cbe0bea8b74df8a7246d706abb1c5c5a6ea330500060bdd21bfc61d0df63d09e0bbeccc10a52bc2593931f622bfc8088e436
SSDEEP

96:NliMwpQO5ix4DLzaeB3enLiQGhkwpi1OdwtJMttTwR/n94XYBrLs4bnmqRzNt:qRvwLiQMpi1zoW/94XCk4bn9z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd30013ddd8def745a70fde383914ba263097e747615fb9ef9a761f695519e5b

Files

fd30013ddd8def745a70fde383914ba263097e747615fb9ef9a761f695519e5b
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\builds\Deleaker\2024_8\deleaker-build\working\deleaker-trunk\deleaker2\ProcessList\obj\x64\Release\ProcessList64.pdb

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ