b310b15ad41bd8ffc3c1979132ebec068fc936513172239f7167d9936046a006 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b310b15ad41bd8ffc3c1979132ebec068fc936513172239f7167d9936046a006
Size

141KB
MD5

503307935c189b31c2f485d8b99e3d69
SHA1

dbd240e995c62bd3d106ab6a13086a69b529cc63
SHA256

b310b15ad41bd8ffc3c1979132ebec068fc936513172239f7167d9936046a006
SHA512

2fb9abb6e9c1282427d2bbdb7a1aaace52cb3a869b11666c6ef903f24aa9ee0161b2cd6791ce21ca9abeecc5a6f605c22148dfc0d9a0ea41db08cdc3af5d3fe5
SSDEEP

3072:D2gsDO2eCjsaEeivh27Cvgcck9ziB97PyI:UD7wabiyogcv9ziX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b310b15ad41bd8ffc3c1979132ebec068fc936513172239f7167d9936046a006

Files

b310b15ad41bd8ffc3c1979132ebec068fc936513172239f7167d9936046a006
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\chenh\Documents\Visual Studio 2015\Projects\Widget\IPScaner\obj\Debug\IPScaner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ