8c6ded15a3877fcf5c2c1bec7c190a0291894fe19a123fa982ed56b516e52bf8 | Triage

Sharing

General

Target

8c6ded15a3877fcf5c2c1bec7c190a0291894fe19a123fa982ed56b516e52bf8
Size

24KB
MD5

ff9cc256d30de7d6ae2c06571d61e0d4
SHA1

4202abd87005c3b3dab33898ade80ea72bdb3a8a
SHA256

8c6ded15a3877fcf5c2c1bec7c190a0291894fe19a123fa982ed56b516e52bf8
SHA512

818f42889ea4c8c68e961c3117010fdbf06739da41222776c5cdeb7559f7b28455b30dd0ab505d63d5d57b4b849118e5dbdfc3e1ae626cd752fc023f87d39975
SSDEEP

384:e4Tpgax8xow5HsFIShRqzkhqSyxo6QWf4VebHCx9fLjfjg2WyzZnZAt:BVZGowHeRqzHSyxdy9jjGmZnZAt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c6ded15a3877fcf5c2c1bec7c190a0291894fe19a123fa982ed56b516e52bf8

Files

8c6ded15a3877fcf5c2c1bec7c190a0291894fe19a123fa982ed56b516e52bf8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Windows\Temp\drone-cbA6LaXGvGFtweiN\drone\src\Common\FeatureServiceInstaller\obj\Debug\FeatureInstaller.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ