dbcc84fce8b992deb7bf7affabb15d80ef532e5e146e89ccde357b9112e7b85eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbcc84fce8b992deb7bf7affabb15d80ef532e5e146e89ccde357b9112e7b85eN
Size

765KB
MD5

ffc2ac03a34171c73f7eceb3447a71a0
SHA1

5f8dc9b2d5738c6916f1742c29341ced4157a48e
SHA256

dbcc84fce8b992deb7bf7affabb15d80ef532e5e146e89ccde357b9112e7b85e
SHA512

6153c58eb2fdd702a89f6483dcad7a997aa1af1e67674f586017c8316d5905fd52af86e923b117ccd4340ae682291664504cbfac14307fac1b2fd7025a6ae867
SSDEEP

12288:rt3heDvPYEi1/p68tmwSclNPK3E1mXE7ddgHwAazjXWw7GQOOqhv6ekcCFBjc7Uq:rShi1//mwjNPK3vEpaHw5mw7GLOM5kcj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbcc84fce8b992deb7bf7affabb15d80ef532e5e146e89ccde357b9112e7b85eN

Files

dbcc84fce8b992deb7bf7affabb15d80ef532e5e146e89ccde357b9112e7b85eN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\maxim\Desktop\Source\nathan_stub_fud\nathan_stub_fud\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ