02fe21b9b12cf1aa78321a78f960a7b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02fe21b9b12cf1aa78321a78f960a7b0N.exe
Size

32KB
MD5

02fe21b9b12cf1aa78321a78f960a7b0
SHA1

2439e72369bfadb40b49f139fbfd253fdd0db193
SHA256

fec4714844a065af6f8e1e8a9c0d71a2cc4b4e772e9e6b8269e2305204909328
SHA512

659de0f48c81e41ac2e67522d73bbdff121e66a4521154591d54750f08553c6ce92cc72bbd6de0b986a50a199e5df28b791711532c1a7b268e8aaaae7a77aed8
SSDEEP

768:Wj1b3suKzD3S8AktYcFA/Vc6KB5YiR2yAMxkE45+P:FzDC8AY8Vclv7jxPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02fe21b9b12cf1aa78321a78f960a7b0N.exe

Files

02fe21b9b12cf1aa78321a78f960a7b0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\rsStubActivator\rsStubActivator\rsStubActivator\obj\Release\net462\rsStubActivator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ