13744d5b2c6c690f86b7f31e314ad5c0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13744d5b2c6c690f86b7f31e314ad5c0N.exe
Size

24KB
MD5

13744d5b2c6c690f86b7f31e314ad5c0
SHA1

5948b8dd51314fc9d70f4c8a8d5f8be1578e815a
SHA256

32df044849c114cbdc7e833703c642f8bb1f46c46ab2a2cc9818193fd187469d
SHA512

964c9c3cbb388a80e7faa33947af6766dc58a3201e7bcf22ece0fdd981cc1e9cc79802dac2089bda557661681459699726ab051f3cce605e5ab33fa7e6844eaa
SSDEEP

192:02GluMLJXIczndYgOGVcwulftya4F3DcjQ0Nuv0OZQav77ftJR+MHbDYTYXSKjrV:NwCcb2gOGVcwkyl1Ak0cCoR3DYFKil

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13744d5b2c6c690f86b7f31e314ad5c0N.exe

Files

13744d5b2c6c690f86b7f31e314ad5c0N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\WORK\Projects2\NET\IDWORK4NET\IDWORK4NET\obj\Debug\Itworks.Idworks.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ