5e4f2d9678bad336f1d711b618dc673f[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e4f2d9678bad336f1d711b618dc673f.exe
Size

3.2MB
MD5

5e4f2d9678bad336f1d711b618dc673f
SHA1

9a4e3758e5b5b80503a5e1a0f9265cf146f850f5
SHA256

e5b9978b7d400f977c1ffceb9193c2d7995d5cf63cfca3573b67a7f25bcb7c8b
SHA512

a0e91b607bded6af1fb41d353faf75cef34a55b8e748d6d820f85a10bc97c1b84c4a6ff5622721b4bdac843fe4c652126e69d9a34d162bdca01a582904f5a287
SSDEEP

98304:DEwGH1hPRC/tDDKnEJUaPZlsoPc1APmJXagt:DYH16tDKnEZLsJ1xXag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e4f2d9678bad336f1d711b618dc673f.exe

Files

5e4f2d9678bad336f1d711b618dc673f.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ