CNET_100436[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CNET_100436.exe
Size

429KB
MD5

d6800ba87837e566e0006b449360cd4f
SHA1

820652cb96c1b96d2fc7c4baf2d6bc95f4929a57
SHA256

2250339ad94099575922a63a25ae01535f12992d0122e111350848ddf2adfba0
SHA512

07c7c701d289a2f106277a6d89b9f87df1617a32d5eaf0e42be9995ddb9ddeda062d00619c58841b1197fca04f9bf82916ff9612805180374dfbd84d6abd806a
SSDEEP

6144:l4n2lloTr26kG9A40bm34imBiOeG65pmoT2:l4elwrOm73L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CNET_100436.exe

Files

CNET_100436.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ