f4c672dc81b064da71eb73a1252444aab43e814754c5a97af75634baff85f3f4N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4c672dc81b064da71eb73a1252444aab43e814754c5a97af75634baff85f3f4N
Size

5.9MB
MD5

ab4f5eb09508ca123d6e808866b79e50
SHA1

d894162e9779fa8898b04db8e246b8a74caf9635
SHA256

f4c672dc81b064da71eb73a1252444aab43e814754c5a97af75634baff85f3f4
SHA512

96a986b858fab003f28709c660dd37891c4fc6d994e57b7f4fb1417342911c8c0cca2b5292f2adb1bb29dfb8b018710b236be7317b1a3f3ebe38255586c53238
SSDEEP

98304:9Se9jd1NMsDORWwnwYW0dsSk+FsTB+a7Wcf37K5JEyUa4HyOy6kqXf0FyMpC67T:weXDMsqRFE0mrzB+IrKHEyUzSOjkSIy7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4c672dc81b064da71eb73a1252444aab43e814754c5a97af75634baff85f3f4N

Files

f4c672dc81b064da71eb73a1252444aab43e814754c5a97af75634baff85f3f4N
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\ZZX\new\Virus\system\ConsoleApp2\obj\Debug\zzz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ