084f5ce19d41d8df9c7efe27a4871b446b33ce4cbbba405af58cee8803037a23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

084f5ce19d41d8df9c7efe27a4871b446b33ce4cbbba405af58cee8803037a23
Size

400KB
MD5

5c334530da07984c3256b714a5391e53
SHA1

0b83eb07d6f0933828b2498b6d73f7881a6ae93b
SHA256

084f5ce19d41d8df9c7efe27a4871b446b33ce4cbbba405af58cee8803037a23
SHA512

3e90d55c152a92453bf5d53da7deec1c2eae195a81d00ef268b9eab6d39371e5cf7f97f6b81463d0df3eb3fac797055ce0ead152072edfada06a4a61af788375
SSDEEP

12288:6mjfnkjv26TNZmFq36+xa6QS1tR8Iynoj:6dv26/mUq+xa6Q9nQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
084f5ce19d41d8df9c7efe27a4871b446b33ce4cbbba405af58cee8803037a23

Files

084f5ce19d41d8df9c7efe27a4871b446b33ce4cbbba405af58cee8803037a23
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Code\C#\SharpWeb\SharpWeb\obj\Debug\Telek.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ