DBD74967581478A9429685113DF1A53C[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DBD74967581478A9429685113DF1A53C.exe
Size

3.6MB
MD5

dbd74967581478a9429685113df1a53c
SHA1

179341960a973d9a519372149ee8099ea0a67e0a
SHA256

8704970ac644f9c7eec883f809720177ff9992fe745607329d2e68f82c0c11b1
SHA512

c6941dba57a12e79db2ca553de1c201d7efa6c1b296a0c8cff7d2a8fd0dc3e8780d8c371063c68e19aabe3f28baa1de30ebd728bfdd49be30d24d549db9fb9be
SSDEEP

49152:fPfq63sUMEHQedMzi1vELCUNNjvFiXThlbmoWScPF57oN0QCfFWZCRf:nf7cUMgMziA9NjwLaoWScPFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DBD74967581478A9429685113DF1A53C.exe

Files

DBD74967581478A9429685113DF1A53C.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ