426[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

426.exe
Size

4KB
MD5

09b20c90529e6839b690425c8aee6c6d
SHA1

9b3fd4bfa0f2fdfa32cece0a398e4ee6e48993e0
SHA256

7ca25733e43c6ec9921319277f255fc03d7f97fc5a89e250723d0732d12efdd4
SHA512

28e5ed1e4a3e32cb9c49386737d68f66c15202ae6ab0022d06ed8d789b698577fa7d2be1b129bd4b3ae39d09dcf4c7a8e945454fa1b0efd0709f692f22bfd9d6
SSDEEP

48:6rS6vkfKrR6KWWuJL1UaFI959kkF5lAzdFWSfbNtm:YJiUsIqIuLzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
426.exe

Files

426.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ