792ff2cbf6d64a418c24470c2431d5c6e7dc38088defbb64ec31ec0b915a4ad9N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

792ff2cbf6d64a418c24470c2431d5c6e7dc38088defbb64ec31ec0b915a4ad9N
Size

320KB
MD5

45d9f067ccc24990538b80ddacd67ff0
SHA1

154f6a9ac1f32ae420eb2af592815317727f9b69
SHA256

792ff2cbf6d64a418c24470c2431d5c6e7dc38088defbb64ec31ec0b915a4ad9
SHA512

f9a146733411a4894c5af7195cf6c7ce2616d7552477f8f46405eda84f199eea4a08ac23a8de078953823da12092ec20b08cbc71842090bc37580385c2af638b
SSDEEP

768:UNUvOys/NsudAgHZclbAzfXGTG6NVrZVTGKZGbl0P71Pnd1nTg6VJQp/X4zmkFWq:hOyOAgHZhfM9xg8dJYocmlT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
792ff2cbf6d64a418c24470c2431d5c6e7dc38088defbb64ec31ec0b915a4ad9N

Files

792ff2cbf6d64a418c24470c2431d5c6e7dc38088defbb64ec31ec0b915a4ad9N
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\hlldz\Documents\Visual Studio 2015\Projects\SpookFlare\SpookFlare\obj\Release\SpookFlare.pdb

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ