2886a152ec6db745d40d20e1b4af36d53774575421e11765388b4f90ebb9439e[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2886a152ec6db745d40d20e1b4af36d53774575421e11765388b4f90ebb9439e.exe
Size

139KB
MD5

8bd696dc4bab29b2cfe8a4b97c5a6c60
SHA1

e1fdea995878a145fc36fa07669c50f042d7c10d
SHA256

2886a152ec6db745d40d20e1b4af36d53774575421e11765388b4f90ebb9439e
SHA512

2a7c1ce742c48805440eb1f3e16eddab48a6bcd848e7bc0da0ba5134dc01f218ba96f936f222a3afbdfd7e1eb2538b08eed1f16d6f9adc86bdb102e0a1ea9274
SSDEEP

3072:tZcHvQBC7gc7hlkkp5x6iVJpW+WrCm1fQJkUpkJD4QIC8KeAQawbRiDA5Lb7pVK4:a361lJsQICdQai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2886a152ec6db745d40d20e1b4af36d53774575421e11765388b4f90ebb9439e.exe

Files

2886a152ec6db745d40d20e1b4af36d53774575421e11765388b4f90ebb9439e.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\belan\source\repos\Prism\Prism\obj\Debug\Prism.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ