c41f1aadb8e3d43082f0860c70c969da531b1e904d2b44848f2e985a149bffcb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c41f1aadb8e3d43082f0860c70c969da531b1e904d2b44848f2e985a149bffcb
Size

8KB
MD5

4293c5a852eb96ba35402c75e5927075
SHA1

8a74f38487b4ff7c4cc8718082209167fe413642
SHA256

c41f1aadb8e3d43082f0860c70c969da531b1e904d2b44848f2e985a149bffcb
SHA512

1e059c7c8e4ec27b29a1391740acb41e28cd6a24c01a35985e442c9a494ab7cba6e9016c3c77c362ae71c7d626f323ee782c066140e491ef4b4b93f9df0619a0
SSDEEP

192:SLnK0neDT+AG/kYa1mxPPU/GhRXcYe69hf:onK0neDy/kMPs/G3XcYd9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c41f1aadb8e3d43082f0860c70c969da531b1e904d2b44848f2e985a149bffcb

Files

c41f1aadb8e3d43082f0860c70c969da531b1e904d2b44848f2e985a149bffcb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2010\Projects\jfClientSD\jfClientSD\obj\x86\Debug\jfClientSD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ