13973911fb6762380b5e78f9559deb10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13973911fb6762380b5e78f9559deb10N.exe
Size

1.6MB
MD5

13973911fb6762380b5e78f9559deb10
SHA1

1fbe8379231aa3f93e2bef6104ce5d2f2b5abecd
SHA256

e1b16a2215e227f8de254fd6f577dc5517a2a6ec881829047ae23c7d84e7c481
SHA512

bf7024fc6e4478226f6bdb3d85c3d2b82094625b70855a1df8ffe59ad2fc77d21a998092e472ccf571c8faddd7fa56414b6353754d4aed80447ac2e7fd292049
SSDEEP

24576:9nl9+SBC2I+V8tgJd8jM84pGaewsAjbw/r6:QS9I+V8tgJd8jM84p5ljsu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13973911fb6762380b5e78f9559deb10N.exe

Files

13973911fb6762380b5e78f9559deb10N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dfsvc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ