D26517874737[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

D26517874737.exe
Size

1.2MB
MD5

68661d46e9fca1f6623e7ed0a11228d4
SHA1

27b02e480b702d6383fe10182b00af2109ef1203
SHA256

878dac79b950c6f1899f3bbec615ac401f4ecc0fbaac2a2d63cd39bbd761da38
SHA512

9dc2d623befffd6ff3c7002e227516467a3e7299df1d35c923d24f8332faa3f5b98d77a1fb4e69188f3bbe6b83cbae628a7c6282932df53f4ad7613e8f7aa885
SSDEEP

24576:QaOn++GsLDR5MiNCOL95yAHPml/XXvQqlXGL8gIGwSrP:K+A6kc7ls8gIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
D26517874737.exe

Files

D26517874737.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ