400cfd70bd018345869e003cef97dd30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

400cfd70bd018345869e003cef97dd30N.exe
Size

4.2MB
MD5

400cfd70bd018345869e003cef97dd30
SHA1

403b739029bc0df7a45c7ef158c2fbebeda12ce5
SHA256

e8677f899f01f64bf8320124d7bd8425408de37b58ff63fecfe6fa02840f53e6
SHA512

f9bdb4247789ef61a1034c141273e8d8df1f053a19a8a56d668f128d398f5cb12b85633c74bc11930ad51f9cb3ec320a21060b1c7e7d971f023748771de4b317
SSDEEP

49152:anjt4e6/hrnjt4e6/hkNWNR9FKsjiKCtfBe5oz34dFR3/8M0mTgcXGaPCquTDiHw:a0r0T/Ks2pfs3RP8MjWKGiH/pBNkdt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
400cfd70bd018345869e003cef97dd30N.exe

Files

400cfd70bd018345869e003cef97dd30N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ