b6bf92d9b9e410e9371a759f9f02cf65d8f93cc038114caaeb6ec8aa7da18b9aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6bf92d9b9e410e9371a759f9f02cf65d8f93cc038114caaeb6ec8aa7da18b9aN
Size

3.7MB
MD5

3ed7bdf6034ac49da91c8390d6815bf0
SHA1

a9d99fa1d9a13ab519473d2d612953178e281515
SHA256

b6bf92d9b9e410e9371a759f9f02cf65d8f93cc038114caaeb6ec8aa7da18b9a
SHA512

c3d5f74a0b241f526f28588c34db760ad5ce70a04cd1f596ed265c22068e716592fb0195e8fca5e268e0a2979a5df957e7a200aeaee444179e05e1731052a0a6
SSDEEP

49152:7TXSQdMsbESrZRSILInqVjCshklV1V7bU8wjikka+5zibN069niQ7QPqRcbDAMMl:anchYVv7ByuzY069j7ggcb8Hv/l4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bf92d9b9e410e9371a759f9f02cf65d8f93cc038114caaeb6ec8aa7da18b9aN

Files

b6bf92d9b9e410e9371a759f9f02cf65d8f93cc038114caaeb6ec8aa7da18b9aN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\NOVA THERACORP\FORMS\LANCER\LANCER\obj\Debug\LANCER.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ