Dark_Guard[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dark_Guard.exe
Size

1.8MB
MD5

396cdc6bc0c29490fc7706a22fe2e205
SHA1

a203c771ee776753a4873515714652a825da0840
SHA256

39a8308126bc3d3b4dfc0730cd29e11a2b4562f356823fa5bbdb4239423e112f
SHA512

e92f0f82047ffd95ebff66c2ace5c52377a1338673a14cdb9dfe20d5f2f8052baca4eee395fc28b01c4c226b954eef9c627b98fdd606b75108bedeace406d257
SSDEEP

24576:YR+nhpdIoPzEgx6reRRqjHc7l9SUIGnXFp8iuG3kOJeOTIRXzmQjcUFI3vdb:YqdTPztGc7uU3nX7n6k0CQjDCV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dark_Guard.exe

Files

Dark_Guard.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ