1eb29fab9f8aa23ffd3de7cc20af03fd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eb29fab9f8aa23ffd3de7cc20af03fd.exe
Size

2.3MB
MD5

1eb29fab9f8aa23ffd3de7cc20af03fd
SHA1

55240155e013abb7cf076d3b9629137bac6c23d0
SHA256

072be0734cd0581ff396918e854786fa2db17b086a06595e5b6418e80dc331de
SHA512

736178980a7cfe902a7a48613b7768cf1f4bebc610e72872162b103716ee460b3bb7019a6a1101cf2f7a1c407277d904892351d6fe3067d32cfd7d2baade0bd4
SSDEEP

12288:kEmnpQX49TUdEY/s0nCDXS58xHQpg92Yc8tYLJDJtqUQcMb:Ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eb29fab9f8aa23ffd3de7cc20af03fd.exe

Files

1eb29fab9f8aa23ffd3de7cc20af03fd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

EP%mT<
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ