b8fd93282ef1d5530d97ee9480b75fee280f9497bcd9c8040bd354077ffa7421 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8fd93282ef1d5530d97ee9480b75fee280f9497bcd9c8040bd354077ffa7421
Size

924KB
MD5

1aa2b884173af2f28f7c7ed1e186606b
SHA1

b2a4fe1b61697fae3cb83234b41156da0e58fab9
SHA256

b8fd93282ef1d5530d97ee9480b75fee280f9497bcd9c8040bd354077ffa7421
SHA512

b247f0d66bc21217fecbc8f6d0d1c78b87efdd29a5ca716805dacc94943240278bddcba10dadd1a3a429bfc611d0c624c1b32142ce96d3a5f3c42eed2aaf4521
SSDEEP

6144:52yAuWBPQEUJu6jOXYT63Xn25uBd0ZEkZGgP9NHUQXiBQEUJu6jOXYT6:dqBIEUJuqOVBWZEw5EUJuqO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8fd93282ef1d5530d97ee9480b75fee280f9497bcd9c8040bd354077ffa7421

Files

b8fd93282ef1d5530d97ee9480b75fee280f9497bcd9c8040bd354077ffa7421
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\PROJECT\AlphaHRMS.Net\SetupCompany.BOCOM\obj\Debug\SetupCompany.BOCOM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ