761796b41b63ea8d7130f72f06578941fed0a80a28baca839966d4e62718933a[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

761796b41b63ea8d7130f72f06578941fed0a80a28baca839966d4e62718933a.exe
Size

2.1MB
MD5

197e5dd8935c52d5b96f23623ec769db
SHA1

e66caa793da37ca65f78ce55961f5395f3786faf
SHA256

761796b41b63ea8d7130f72f06578941fed0a80a28baca839966d4e62718933a
SHA512

a6e613ee017ab7373fecf0de7103132903c1cb94b7929097dec59a52c4bfc92e8f13630693d91dbd1c678c68066ad8e0241e85ace69e10f87152a422a07e3936
SSDEEP

49152:1W81IR+7WGayc0Ol0RUO4iUxFLNLiWbGd1pdJckqIrxm01j86:1W81IReW9yc0X6OhUvViXZqR01X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
761796b41b63ea8d7130f72f06578941fed0a80a28baca839966d4e62718933a.exe

Files

761796b41b63ea8d7130f72f06578941fed0a80a28baca839966d4e62718933a.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\rwwq3yl802ay\obj\Release\Extractor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ