Hentai_and_Nudes_searcher[.]exe | Triage

Resubmissions

20-12-2024 07:33

241220-jds18stqej 10

02-10-2024 12:01

241002-n6xmcavdjp 10

Sharing

General

Target

Hentai_and_Nudes_searcher.exe
Size

437KB
MD5

70e761e3048bc3b921ab2313199fd74f
SHA1

1be4deee7db5645d1e42c8e0583d3f67d5907066
SHA256

8f244860702e6ec3d0de412de629e827bff49b641e59d71557ff3559e60c59f4
SHA512

a6ca91827a3ead93b473beb380b4f757bf6140e05022a601e84362b47d46078cb14231261f6953aa5ebe7024f7fc2b8cf617b2d4f31149273da945893c85bf83
SSDEEP

12288:Jl8/sjCS8Oajo23qfmk56LBdwYPfYW7CjKmPvsnxC8fE85M16YTTKEmCj5iZSazW:EVYXKgij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hentai_and_Nudes_searcher.exe

Files

Hentai_and_Nudes_searcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\user\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ