db5bbf019b5d431164ea6c9b84d29a27[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db5bbf019b5d431164ea6c9b84d29a27.exe
Size

599KB
MD5

db5bbf019b5d431164ea6c9b84d29a27
SHA1

4f97bb863dcc46e08bc3c78e4e22cc68f0ece2f7
SHA256

bb5599410da2c8b69a93311345c1e5d58b3149a6787d5aaecbe248c93a3b3645
SHA512

f6e59e745df36cde93288dcce796d2c65f31df7f2aafff007fa97b1540b7009518d3feefe72c9adb110439057079216ef490d3b1d3c6f30c16c8d841c2c5aa24
SSDEEP

12288:n37bhIuM1z1GI1W9i7HVlYmqquXqd/HYNuIIzCP1XRaUC5fVsbR:nLtTLW+EHVlY19qdIuHCP1YFtO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db5bbf019b5d431164ea6c9b84d29a27.exe

Files

db5bbf019b5d431164ea6c9b84d29a27.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ