ndqwnudawnsd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ndqwnudawnsd.exe
Size

356KB
MD5

efecabfdb6396b7c3d1a9a79a0f57aea
SHA1

3d686e0ee41ff4d86a4f8e4191ecbc6442edb5fd
SHA256

06574fd0e58717c81025f4451728ef7d82836b060c2b32d6d99723f3b577045d
SHA512

dbf60334dcad7324687ef423bf477d0d360376d9a68f89ca7d00c8f71ec130deca7ff5c0eec42f69edab8e84248bfa19d808f166c70dbdc7bafaaf97d3a57ef7
SSDEEP

6144:SaMfk8weXRfz9Xe6VlWT8b9vP5B6mT6feBHPbBN0ZTN:SZfJXVzFPVle8ZPHu2sZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ndqwnudawnsd.exe

Files

ndqwnudawnsd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ