download (2)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

download (2).exe
Size

15KB
MD5

f83f005d5eb6de972996e4cb10b939bd
SHA1

6a6490a4d3d7a0a2520463e078d24bf8d3fc1689
SHA256

c92b586ab278e4d0390629f9039182d9d012e49605db44fb90db56951693a1be
SHA512

6eb9e888b0de4923b96e3020712d83ff286e39e5a723483e7c696b256990cef5778ca89f6c72f8d174abfc1626af1a8958b5965e4f0f7a9b5127db6d0e88ead7
SSDEEP

384:AEpO8nft/JD45u40J74LY/OiwtAI1fi4VJ:AuO89VYjiOixI1fi4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download (2).exe

Files

download (2).exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ