2982d7fbda8b889a9cc7ea780acd6ab1e03dc69360836a3a60bae08ae6307ad5 | Triage

Sharing

General

Target

2982d7fbda8b889a9cc7ea780acd6ab1e03dc69360836a3a60bae08ae6307ad5
Size

313KB
MD5

6423234685ca0046f61adac81f3b71d2
SHA1

138de6c0170db1a72203475b94583b7f06fbaf1f
SHA256

2982d7fbda8b889a9cc7ea780acd6ab1e03dc69360836a3a60bae08ae6307ad5
SHA512

07ec233c53057f26ecfccd9b3a6e27de373d980fa760c689468357c5f7a8f8f1020aada9263545b38fd8dd19af91cbca2a1006f30294abde278c1c0dec42d3fb
SSDEEP

6144:JdAUBV1OgLYTQdRyAl4V2sHAe2HIRqMkNnT3DhxJgUGCm:4uV1O5Qz/4IsIkkpxxvGC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2982d7fbda8b889a9cc7ea780acd6ab1e03dc69360836a3a60bae08ae6307ad5

Files

2982d7fbda8b889a9cc7ea780acd6ab1e03dc69360836a3a60bae08ae6307ad5
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\rje\tg\obj\Release\Fcs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ