s2b098765456[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

s2b098765456.exe
Size

223KB
MD5

4c257a8f201861fc89babf5b60f30c24
SHA1

bd3e902c71e2993522324194711827515b889871
SHA256

47fc03f67fe9678fcc2a68bfd2fe0d75dec153ba66f84088395020b28cc7307f
SHA512

78836e6c4aeada6607f722ef6db71ec2e9c152c2774c676cd83789e71716147c41f4547fee9a818dd48aeb83c4c9a7684e91ed296582ee0166cc1b1bda823f5e
SSDEEP

6144:fmN3WNHnldWjuhCKseMMNeyzzOe+Y9LiEJv0RS9Vy:fmN3cHnldWjuhCKseMMNey3P+AXuQb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
s2b098765456.exe

Files

s2b098765456.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ