2bd99aad323dd4f889a63e93822ef65d[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bd99aad323dd4f889a63e93822ef65d.exe
Size

1.7MB
MD5

2bd99aad323dd4f889a63e93822ef65d
SHA1

a398c81b5ff690838f906c3bf0251bb7799d4d36
SHA256

d8bfac190a02982a1df4b78937e75be37887d6d158d021391db60f9af2ca45c0
SHA512

01c0fd02e25c333306a282484dd62359fcb78a88594488579c8086c3217a77a21e1bd6c0dbc5ecd49aebe00bacfd1c56adf1643ea2b468c97db64c79881a42dc
SSDEEP

12288:PzaVOtHUB7lceAvwDl5WJSVNUYAORVmkebYFonBxpr6ezkE03dmKfTmQBrDROGdH:QNHVzebYa16Tw4HV

Score

1^/10

Malware Config

Signatures

Files

2bd99aad323dd4f889a63e93822ef65d.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ