1cf69700fc71d6995620711860bc3700N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cf69700fc71d6995620711860bc3700N.exe
Size

13KB
MD5

1cf69700fc71d6995620711860bc3700
SHA1

d087291ebe5474f33f0aa8379bbca3ed2644fe8a
SHA256

370dee13082746c999a8ab4dfac6379addf37eed4c4d62cf54556eb41c86c79f
SHA512

0ed0d35d7fb783ce0ae565157b7fdcaacb002919f196b98610fb09a9017b1806e7c4d7c28b3eeb2801398f68b31278fbee3cdba3cc52761fa2e49c73bc71f4c7
SSDEEP

384:WZiWlE4557fLePg1sVidTyLt4TpTmxOtKX:IJlE4nfLwuImye9KxOtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cf69700fc71d6995620711860bc3700N.exe

Files

1cf69700fc71d6995620711860bc3700N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ