CNET_102493[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CNET_102493.exe
Size

65KB
MD5

3223c337454ef5722cb1897036d31ca0
SHA1

bf07bed2d802ee0b4cde2b2fb1ed4427a87384f3
SHA256

321f97a0d5df071f3ab70e4b1a2056059eaf361840016de586086250fe184d17
SHA512

ffe6fd7ae3615adba70a5e944da820f0836c85166a442aca79a0e67c860ed06ab0ebba6144c067f154d6a0b78eaafafdef490ea35b3cc3c727e439c2eb17be98
SSDEEP

768:tQpafuoYhxhkTsJu9O+S8TTm10gH0w/kmmmmmmmmSmmmmmmmRmmmmmmmmmmmmmmD:KaYIF9O+gU4z0O2/S37nwPnwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CNET_102493.exe

Files

CNET_102493.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ