CNET_103699[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CNET_103699.exe
Size

20KB
MD5

51576ecbb14cfa43035a0a8d5538f74a
SHA1

b7ab4b267e0ca754763d5741093a2f1834351272
SHA256

d7899c38f555bf5a5a83352d6f832053b174593c44c778ad322ab076db93eb5d
SHA512

8610a5a8b73a128c77937ee78044e141c3d3321684a34786c3c33b49fbe00305f3e30e544c4560cfb9e77cccba095f6399313e4e72538b5d7db7ad6f95b98652
SSDEEP

192:x7P9/CLYVVPoVjil2Lt5MmIY6/PhhMThXJhQ8YWy:BP1CLYfAVC2L0m/mZhoXHWWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CNET_103699.exe

Files

CNET_103699.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ