61de8e380be57b46a99ff24ef00ba6f61b4361b26563f24ca29750cb13ce4d42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61de8e380be57b46a99ff24ef00ba6f61b4361b26563f24ca29750cb13ce4d42
Size

359KB
MD5

9d92e4d5b2637ca3fa9c7126e262107b
SHA1

d875408b95653a38398d0ceaf1e84592ec7edf45
SHA256

61de8e380be57b46a99ff24ef00ba6f61b4361b26563f24ca29750cb13ce4d42
SHA512

1cd0c767562e6b7211f9d579c0acbe41c354dc9e63cd4006dc274d7342924d9d3512f83e666b032de15cadcf2548cbea232033c91743fb1b8b8b3c494d0ea6e0
SSDEEP

6144:si0kRP1JsMVDYE8hm9ORxSVML+FcFInVQ90TwWWQ38F:sdkRP1VVDYmQKuL+ayVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61de8e380be57b46a99ff24ef00ba6f61b4361b26563f24ca29750cb13ce4d42

Files

61de8e380be57b46a99ff24ef00ba6f61b4361b26563f24ca29750cb13ce4d42
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\1\s\ChangeTrumpfServerName\Source\obj\Release\ChangeTrumpfServerName.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ