11cf36796a468db2f1789d06d01a65f4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11cf36796a468db2f1789d06d01a65f4.exe
Size

575KB
MD5

11cf36796a468db2f1789d06d01a65f4
SHA1

51248fce4f101fb7658194a769d51ec5ce4e101b
SHA256

1c4912d724ce2c46bef48e510e3203d1b460c77cc16f3fc2eaec561499b37302
SHA512

5c0105da6802738c3d776a90467fc2f302ea42e417b90e74b059f128fa613d1af5de4d39dcfbced079a38008eac6d949e054287fab6d618381cffeee64eae1d6
SSDEEP

12288:WP3Q2rDaSVCKhovfecEvvgZv8BG7CZunjlo9Yl:+3Q/XK+vfQdZujl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cf36796a468db2f1789d06d01a65f4.exe

Files

11cf36796a468db2f1789d06d01a65f4.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 572KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ