aff80905630b6f56104a778ae56c27aeecbe5159d8b7836a590be01176f075cf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aff80905630b6f56104a778ae56c27aeecbe5159d8b7836a590be01176f075cf.exe
Size

1.4MB
MD5

cf9ff312e3390af3ee98412211696bba
SHA1

7639f406e6209ded7874d3bb83cc94bb7835f4e4
SHA256

aff80905630b6f56104a778ae56c27aeecbe5159d8b7836a590be01176f075cf
SHA512

cb72e6c1aafee34302d1efd39ab9cf6bad31030cbc155726df89d01ab90d1efc2fececb19a7fae8fa0872064bad125496a5932d65575d968a6794a047537d7c8
SSDEEP

24576:rCKizmNJkgxmwNev01UabtyGkV6rUpyJRIQTW3Zd/Fe7RMPCwPRc:Hi6fhmwNenaJyGkV8UpEhaTFe7RkC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aff80905630b6f56104a778ae56c27aeecbe5159d8b7836a590be01176f075cf.exe

Files

aff80905630b6f56104a778ae56c27aeecbe5159d8b7836a590be01176f075cf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ