CNET_264472[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CNET_264472.exe
Size

542KB
MD5

ed708bf70a6e05d50937168e6f112f78
SHA1

aaada8de9aaec83dd4b6a2773db074395fb5e4b1
SHA256

bf959e141d87e4cea9f7e6a165c4c8bafe46475a751e9a6fc1b15dcbcc903aa2
SHA512

c838d869fef5d5dbdfd7a6cd2884f22b34814cde822e12e788c305178add6ed7784e16069d8c2fa6c7cf8d6c2eed1b68ce25eeb038907dcb7020e22d8e959609
SSDEEP

3072:XvaBsMYx2aFh8FvdF+dN6htaBsMYx2aFh8FTNdiyhu2wtzs+a1CsBaBsMYx2aFhp:AMMva6gMMTzMjbMM4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CNET_264472.exe

Files

CNET_264472.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ