CNET_104109[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CNET_104109.exe
Size

592KB
MD5

8c7173b0a4f7b573120efa35a8d0c987
SHA1

2d253c516398a63d193874b680a0b515c6aa1c2d
SHA256

c1b3c1a961dff777ca75a15cb8e0be00dcf3d4c9871797647d2181af03bf2cc7
SHA512

1c4a265c41141d2b7edc061e1ad97d807bc598521140bf9603c111db2a96ea4ad4157795140ad046e060e54f88abe0bd578a4133e1b6e22c57e7724bbb03c9c7
SSDEEP

6144:UaQVhpQsdRA+yZZwLxPKkz0BIlz5RA+yZZwLxPKkz0BIlzr7Ak4KJvRA+yZZwLxR:Ua+L/z5/zr7NP/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CNET_104109.exe

Files

CNET_104109.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ