5aa5824d91e9682a883436fc765ab9ce681fab40c1792902b7a74914add8ad8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aa5824d91e9682a883436fc765ab9ce681fab40c1792902b7a74914add8ad8c
Size

34KB
MD5

516ed9ac50841792ce5850ab9e5944b9
SHA1

c944f92d5f9cf9c5f406aced07c9de9f3f112598
SHA256

5aa5824d91e9682a883436fc765ab9ce681fab40c1792902b7a74914add8ad8c
SHA512

56ad37c1d89156b3893b8cd562b796f0dc23cf88ca0de7e16b88aeb063864158ac6e655a90496278e6055d64b81ba409e75be0a5cc3aef8b254f7b5177b43af9
SSDEEP

384:44dwVdWis3n5yJiyEaLOdyu9x99/iYsSCXsWnb0yobExrZt4MxrZtuuvxrZt45xG:RwyiF9L8UYsJnb0fb24+uuR4L7oq1ZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa5824d91e9682a883436fc765ab9ce681fab40c1792902b7a74914add8ad8c

Files

5aa5824d91e9682a883436fc765ab9ce681fab40c1792902b7a74914add8ad8c
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Couia\source\repos\CouitaTools3\obj\Release\CouitaTools3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ