1acf9fb804e9138668458fc4c4c63c10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1acf9fb804e9138668458fc4c4c63c10N.exe
Size

51KB
MD5

1acf9fb804e9138668458fc4c4c63c10
SHA1

ba6c1c5e7cef207f5a9884a8a0cbd1477affceee
SHA256

d8fae0f413cd2addbcd916d52f07a2291c382dbbce2cd6d4ad668cac47f82569
SHA512

da2043bd0f423b64320b9c0c54d0e9e4a5ffde5166fa4aebac4175169a1dceacdbc707ce5d3f90c6cbbda3087389085b2bb3e68fdd7b1765e3cb6680b72088ed
SSDEEP

768:VIu1CnppTjBgnIcFrwuPx6I2+BQO02xoqSKafo:FcEnBFRAFwAVfo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1acf9fb804e9138668458fc4c4c63c10N.exe

Files

1acf9fb804e9138668458fc4c4c63c10N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\Frame8\Base8\Base8.Shared\obj\Debug\Base8.Shared.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ