ddafde8372622aeb2b27c184f70fa41a23a1116738de28ed39bd8688abc191c8 | Triage

Sharing

General

Target

ddafde8372622aeb2b27c184f70fa41a23a1116738de28ed39bd8688abc191c8
Size

16KB
MD5

9f16bfac5fc32fd7b1e5cd3bf5fd9b26
SHA1

ad5faa17df3d9a12661bdf07cf8c48f73a536a49
SHA256

ddafde8372622aeb2b27c184f70fa41a23a1116738de28ed39bd8688abc191c8
SHA512

242ceefb341f7a761fa32a56243f02f26c690487326aedbfb2e430d7d09ae6bfff9674b48f77d364b7a521ae305c4fd8d5125302af9f3041a23d8382f03a023f
SSDEEP

384:x3iax7RkEyWeWRPlYD9D2jol9Z3yYe2V8RZShbLF:x97neguD28TNyCV8RZShbJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FrontLink2WMS.exe

Files

ddafde8372622aeb2b27c184f70fa41a23a1116738de28ed39bd8688abc191c8
.zip
FrontLink2WMS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\2024\FrontLink2WMS\obj\Debug\FrontLink2WMS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ