50ca44f8ed21b3f6200a2248d0b98b10N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50ca44f8ed21b3f6200a2248d0b98b10N
Size

2.2MB
MD5

50ca44f8ed21b3f6200a2248d0b98b10
SHA1

7965d91d6e58ec4f4d9496915b4b332d776e9fa9
SHA256

38dadaf706b78a6ee7095dbca9c13940b0ccd2e9ad13c5a03804601a7d30d11a
SHA512

ae7c70b02a657677dae88291105dfa1b079f5e5b3ec751a4e5904b980a5d88a823fe320188d257e1e9a22e68abdce3840bae6a1727209fcd9af43163f29932d4
SSDEEP

24576:IPe0aRbD8X6HoroFdM09vZghVrHt9nyrRqAQOEwxBVwk8JYWfp:ka2zoFeyvZgLrH/yd+OPBh8JYWB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50ca44f8ed21b3f6200a2248d0b98b10N

Files

50ca44f8ed21b3f6200a2248d0b98b10N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\redops\Downloads\pingcastle-master\pingcastle-master\obj\Release\PingCastle.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ