n9384591[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

n9384591.exe
Size

902KB
MD5

1af9aab7e8f8ed0cefc556f67edecfc7
SHA1

2aee5ab1b89e0465fa7ea5a462649296e14b19e8
SHA256

48dd37a6e6a934d488e3ba42fe164cccd341ddd9ce3bae833c5546c7c83657c2
SHA512

a043d6c5ec86c8be810b85dcedb7391c31ffd2da36b46607a3870e33b1646e1d4b27abdae5c67dabe52cb533fd3835d3469c9f499eae6a98b8aca689ebb19978
SSDEEP

12288:Ge+cDeSGK6eNgo7Gg+unibP+DxpW3DqBq3ii8AO233ar3oUxv7Sc4Bc3lAw8Bgc0:Ge+cDLkBLqdvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
n9384591.exe

Files

n9384591.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 900KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ