840006dac67d23b7725020c8441a6a4b[.]exe | Triage

Sharing

General

Target

840006dac67d23b7725020c8441a6a4b.exe
Size

431KB
MD5

840006dac67d23b7725020c8441a6a4b
SHA1

27da8a80d2cd2a2740dbaba69b4440f5ef4baaa4
SHA256

31fd5ab4ff38fd42399d4d90a19da71b94cd7ba47b0a97ce1bda37958ce97ef6
SHA512

369eb8c565ae374b093e7bc4ef578c8f48a77e37b994b0b3b8023a842e5c435894e2bf4894e7ee3aa770ab96268f3d023e1694777104f43794d9327c2234eefa
SSDEEP

6144:xougwOscwOzGNKDazRtZoZdLJufjI3RYOllVn9k/6E9MzKi:oacjzkRfG9OI3799k/6E9M+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
840006dac67d23b7725020c8441a6a4b.exe

Files

840006dac67d23b7725020c8441a6a4b.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

"1tT"l
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ