rNJnNhNnN877[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rNJnNhNnN877.exe
Size

776KB
MD5

e8a910cfaff49b29e0a26ef127c79137
SHA1

6bcf9afc3b689732376dd8a276173f5a0cc7cdb9
SHA256

181c961adb5e3152a9384f18a7fecdc0574a311640434b1a98b3b514311ed645
SHA512

fc2880e9c85d362ff840193c8cbbd6ae34fd3231ca71ba731b53dfb46a8ddffc5eafbfddf3f817da70923732c1ba987b84e89189cfab0b0e2dc3dd926340cdb0
SSDEEP

12288:n7xF8Mvg3VIS48cc3eCWdK31HovvhBe1sYgcpBTve/xhvByh1Md9cwg:3yVIS4SVRxAwE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rNJnNhNnN877.exe

Files

rNJnNhNnN877.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

?B{3xX8t
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 772KB - Virtual size: 771KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ