0dc876feac6fe7b36d05ce5d55027460099156455b93cef280aca80ed5c3cf8f | Triage

Sharing

General

Target

0dc876feac6fe7b36d05ce5d55027460099156455b93cef280aca80ed5c3cf8f
Size

4.9MB
MD5

9cefb0984d619e3689fc35d892fefc84
SHA1

fdd4a57decccc82cc8c475bc349a1835702fc47d
SHA256

0dc876feac6fe7b36d05ce5d55027460099156455b93cef280aca80ed5c3cf8f
SHA512

37810608de7cc503eb808d6d93d20d4578016b578c3eb48bac5334ff411bc6bc96a7560c43c70ff3f334a8e725c442cabb8eec8e9108004916a7ee55d62aa8d4
SSDEEP

49152:W/uTiCw80UsRzyk4miPIVaR0b6Z5Mc46/SNREUT4j9jEH3q90cSqmV+tiAZ23ch7:WkwTiPIVa62fy6qNXI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dc876feac6fe7b36d05ce5d55027460099156455b93cef280aca80ed5c3cf8f

Files

0dc876feac6fe7b36d05ce5d55027460099156455b93cef280aca80ed5c3cf8f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\tkgl\source\repos\flytkgl\PDFQFZ\PDFQFZ\obj\Release\PDFQFZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ