60e8b003440b080a51356349e2fd177d7b6c9d9661b22540462d0d01598f4a49[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60e8b003440b080a51356349e2fd177d7b6c9d9661b22540462d0d01598f4a49.exe
Size

38KB
MD5

bcdfe1731245b9594dbeed5cb5b20a8a
SHA1

ab7a01df48b61f6202adabc178789bd9714f01b4
SHA256

60e8b003440b080a51356349e2fd177d7b6c9d9661b22540462d0d01598f4a49
SHA512

f81c6b8cd147fb4ff7de3cfe378a4b6e2801471f4ed2e48bc0952c4125c33e12a15e5182c0e2e5cb768b9c968de0dcd3b9ec526546067939be7b1d4d1811cdee
SSDEEP

768:fUNmxpM0q+B0v3RGt9gCKEb0vHRKPa+C4ZlU:fUNms0qc0v3RG4CKqQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60e8b003440b080a51356349e2fd177d7b6c9d9661b22540462d0d01598f4a49.exe

Files

60e8b003440b080a51356349e2fd177d7b6c9d9661b22540462d0d01598f4a49.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\SiNoEstas\obj\Debug\SiNoEstas.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ