NCBGRTF-576TER4 [.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NCBGRTF-576TER4 .exe
Size

764KB
MD5

cdf83fe1a3a1635ee4e7ba3710e4e2f6
SHA1

025c1585b47bb5420aedf4828983c68d0a7b8fe5
SHA256

994fa755944555aa46ecbf95958ee92c732100468d2fe3b436292c769cb86b46
SHA512

f04d3f386ed7a3ed8753ed29a2317c614dae7928c4097afb7b047a0333e1f5a31de157e7d0dec680016be0cf0070a88bb8cb1d5fb332cf85468760665a6779f8
SSDEEP

12288:SQl1yvK/qzHkrYof7c0K+iBumd48/v9Ekfb583GPaCWjOLD1skRVyGaTFUYc6isb:SIyxzErrI0hiwd4GkfbHiCWUDlR0GLyN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NCBGRTF-576TER4 .exe

Files

NCBGRTF-576TER4 .exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ