c9004c6adbf9f8bb3ee3986854a84fa96bdcdeb836a558a5411470a0b62ba0eaN | Triage

Sharing

General

Target

c9004c6adbf9f8bb3ee3986854a84fa96bdcdeb836a558a5411470a0b62ba0eaN
Size

2.9MB
MD5

f81132b254d553efa340267e90fce6c0
SHA1

f9e0ff9db9b8445a492944ca6a6fd31b020356cd
SHA256

c9004c6adbf9f8bb3ee3986854a84fa96bdcdeb836a558a5411470a0b62ba0ea
SHA512

14b54503262b463260d2f283aba86d638c523115f70b4f720d802553d05479d280e7c0ef0df41d94fed75637f210070e141121f03afd04538922ac93b7ac8fa7
SSDEEP

49152:pPklXITYbNbNWo4kSH3OqtwIKbkqXfd+/9ACvWEvRBA2FCccvnpXSVfQ3Hhl3:alXIT4bNJFY3OqtGkqXf0Fh+Ev7Z8vp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9004c6adbf9f8bb3ee3986854a84fa96bdcdeb836a558a5411470a0b62ba0eaN

Files

c9004c6adbf9f8bb3ee3986854a84fa96bdcdeb836a558a5411470a0b62ba0eaN
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Dhasu X Cheat\obj\Debug\Windows Modules Installer.pdb

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ