cc6950e71d8752b72a346b564e134f64b1db02433c0cff4beab2e7535d8ab796N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc6950e71d8752b72a346b564e134f64b1db02433c0cff4beab2e7535d8ab796N
Size

78KB
MD5

8af56af26c61b72fd40582a723767940
SHA1

604ea4dfcd82786120373f42e74b35f613e3db86
SHA256

cc6950e71d8752b72a346b564e134f64b1db02433c0cff4beab2e7535d8ab796
SHA512

74f4e5b07aef30ef7f4300d3195a9ad291c070701a10ae35a3ca5a30d6ea88179262efd4447d03cd8ca80acc2239c3a4ac3d27e159a45ffb17321e6b0e0081bb
SSDEEP

1536:r4CsLCnIejaqVcMItLbNlK8jG2PtbQ+8iAX2I92Xpzb:BsLUI4dcDbNlDjGzDCP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc6950e71d8752b72a346b564e134f64b1db02433c0cff4beab2e7535d8ab796N

Files

cc6950e71d8752b72a346b564e134f64b1db02433c0cff4beab2e7535d8ab796N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\GIT\Igloo\AGSHost\obj\Release\net472\IntelGraphicsAGS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ