f391e1aaf93bf87fa0322c0bd3ab14f0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f391e1aaf93bf87fa0322c0bd3ab14f0N
Size

101KB
MD5

f391e1aaf93bf87fa0322c0bd3ab14f0
SHA1

141d2a79f4f3477b1cf7b4f4cdd9f91f6c9538ad
SHA256

4704218c4bd67fbdee7ace6be4395ce1b85ca070b79ff9da0fc2a669c3613ea6
SHA512

5fcab2ae950b68d2b55b6b48b120a44b5723ee40a20f99dc1ae981f0dd9f721ec50b045c32b62b5bb073b5b031d912cbb1f6f529d68b0ea27c116298b99b5713
SSDEEP

1536:I2eJbK+PPdzL8tra7OjgY9LpN3N65oNkl4lMYzT3HpUqij4c:I3KosrzjgKpN965+kgnjHK8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f391e1aaf93bf87fa0322c0bd3ab14f0N

Files

f391e1aaf93bf87fa0322c0bd3ab14f0N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Projekt VISoftware\! VISpoof !\NBEW\VALID LAUNCHER\Launcher\obj\Debug\Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ