139b019a5b96840b3e41e796a0927870N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

139b019a5b96840b3e41e796a0927870N.exe
Size

2.1MB
MD5

139b019a5b96840b3e41e796a0927870
SHA1

400251d24c48e5613f5e46d8a61adcee34c44beb
SHA256

ea9b29d1490161fac5751205270111d1819bd9c1c8bce40b05eacdb2fafe8d41
SHA512

71a251146b77eec83f40818aaa15dde70add849fc37ee143b3b6bb944ae6e9552305a44d7ab70e518e3411abceb5ffbf22092b338954f1458a9899523d0fb574
SSDEEP

24576:+L1D5mSWLqLj8O5M84pGoAj54GXTPjO7KX53RTh0tFda3N/HEp6uuJc+lPY9T9+Y:s1deLnO5M84piHTrOO53RTqtiZEp6Tc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
139b019a5b96840b3e41e796a0927870N.exe

Files

139b019a5b96840b3e41e796a0927870N.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\cnfnot32.pdb

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 340B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ