ef85fa47954104a92ef656b2322fe3843c7c867789d32399c1fe884166d7ef49N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef85fa47954104a92ef656b2322fe3843c7c867789d32399c1fe884166d7ef49N
Size

4KB
MD5

bd764d944b588a16f76f876b57c22f20
SHA1

4cf99b22e5f6d6755c6762d578fb871c4b6ec0b2
SHA256

ef85fa47954104a92ef656b2322fe3843c7c867789d32399c1fe884166d7ef49
SHA512

592f621fd420d8f21ce452f2d5dc9353737ce53f8615398f92be7dc6575b00d6ca100cd8f9c7b01cc76b6c8c9891505690c0dc1bf2afe8cb1b096edae912b914
SSDEEP

48:67g8J9TGCMeB0tDluzhCWSDD+9qvookI0WI4GX0KXfyFAxK1P5vcLlMvL5zgZQLf:MXTVCWSDtvooFZuXh/xO6aL92zNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef85fa47954104a92ef656b2322fe3843c7c867789d32399c1fe884166d7ef49N

Files

ef85fa47954104a92ef656b2322fe3843c7c867789d32399c1fe884166d7ef49N
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\popok\RiderProjects\byteConverter\byteConverter\obj\Debug\net8.0\win-x64\byteConverter.pdb

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ