3ce19488552b5324f238ca1da8009e00d18281d32a35fb5ee194d58639d58ae2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ce19488552b5324f238ca1da8009e00d18281d32a35fb5ee194d58639d58ae2
Size

36KB
MD5

7ecbee3165563b1ff52c3d0c50e6cb3a
SHA1

b4a29dc298f8a90e113944433f982e26610ea5bc
SHA256

3ce19488552b5324f238ca1da8009e00d18281d32a35fb5ee194d58639d58ae2
SHA512

dd04ce8af372953a30dd3410b85c2bab5e424c291b130fb73293d606fd9fe1425b7e80fb2b3cd0f5db485c9e0bb80a103d795ee90610cf7aa3cf24afdbc6db70
SSDEEP

768:X5dUPE7MXRqFoNbUjk/Ub2D4C+U9HLpPKxn2QCxBR:puAUqF1jksqDPjrp1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ce19488552b5324f238ca1da8009e00d18281d32a35fb5ee194d58639d58ae2

Files

3ce19488552b5324f238ca1da8009e00d18281d32a35fb5ee194d58639d58ae2
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Project\X-ZIGZAG\X-ZIGZAG.Client\frameless\obj\Release\frameless.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ