l0396424[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

l0396424.exe
Size

136KB
MD5

b2155be634a15794e05cc77539ec6552
SHA1

33a9461bfad9f8d3c99bd325a55245467e3f00d3
SHA256

6a34ede80e7598de8e16834e2c8d2eb2ae9699a0dc7a56382edc3a27e3f144a4
SHA512

cb089ce973434e65206db3d3e2379fcbfd4d2f14602f091ed48aca278de2e7e723ba6ed146d95eb686385eb3577c7f2af03e5cfeeef25a7893e5a941eb58e097
SSDEEP

1536:sqlGlfDcW7UiCKrFUECycALmh4f5FbV1hN+TmdsYgibfbFDKsRC:z0lfDcW7H1W/4xVL/+TmSYgafJlC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
l0396424.exe

Files

l0396424.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ