E16601E4D64A0240D8F55D93FF682CBF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

E16601E4D64A0240D8F55D93FF682CBF.exe
Size

32KB
MD5

e16601e4d64a0240d8f55d93ff682cbf
SHA1

39047837aee1bae27600349c8070e6cbdd9330d2
SHA256

9b475868e6aafcb6b81d3c4d92d039987b75ef3829c2a834917698845400199e
SHA512

5d14b8132754d3ecf6dc729be9d9388db98b7c0f1f8795ee0ec8e3ecabe05e2f1fcee4ee49af173d41263cd637276255c4916a715ef8494dbce8065c2d427fc9
SSDEEP

192:GctzdkaK/n7bEbIn+qeD3cugX8P6J8stYcFwVc03KY:Gy+p7bEbIn+9gX8yJptYcFwVc03K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
E16601E4D64A0240D8F55D93FF682CBF.exe

Files

E16601E4D64A0240D8F55D93FF682CBF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ