29c34e006b4bb4e33bd0e68329c9a650N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29c34e006b4bb4e33bd0e68329c9a650N.exe
Size

12KB
MD5

29c34e006b4bb4e33bd0e68329c9a650
SHA1

f0655ddda9d7183949f7392672d02f814d725833
SHA256

81240759755ae8ba7f5fb71122223fa4cb1f1a146a325a80cae296ac427fff30
SHA512

b917932b34aaaef488127a71f5637bcebcb21f82c3e4e0f5b7d1977208dcdedd6318493454f2681ad64e1b4eea5689bde173d4313c7323c7d2281bce2bdc2cb7
SSDEEP

192:OdLM3QeChUGDNYeiZV8nlYJL/ertIDKLTGafab/f1VSWnwPIskt:OdLM36hUUYXTqB+KLTLyzPlnwA7t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c34e006b4bb4e33bd0e68329c9a650N.exe

Files

29c34e006b4bb4e33bd0e68329c9a650N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Public.Anon-PC\Documents\Visual Studio 2010\Projects\ProxyGet\ProxyGet\obj\Release\ProxyGet.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ