n5481016[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

n5481016.exe
Size

904KB
MD5

a8829cb9061d39c07459de5c98e24a45
SHA1

af1c9ec7c400342addc7277acacdbdd363f645a3
SHA256

3a0e04027db2851846ee7d45cd0277c3be38556b809682db78422b31e55f2583
SHA512

4f15edf6f53dbd9b07e47dd10473616c9850865780f52737d685ddcfd8f568234d95eb2cbfeb6b18ed28fcd6289c14b17f77f8c4441b4642b5047656521daca6
SSDEEP

12288:ibJdHsZp2BADCA0Txgz0uCNC45//RW6s4yNmuCMzZBO1scqwlDS9tdh8ZcfKhql7:4fHsj2pTuQBb1MzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
n5481016.exe

Files

n5481016.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 901KB - Virtual size: 901KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ