2c86fda6c0c78378c0341b97555f83f0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c86fda6c0c78378c0341b97555f83f0N.exe
Size

77KB
MD5

2c86fda6c0c78378c0341b97555f83f0
SHA1

a9a309c80a9c0451b143d7b307c9bf16939389c0
SHA256

b601b429182f0a41032e90306f6d64f6cfcc68b6ae970fbeb83650c59cdb5823
SHA512

eea0c06024c66b5bef4e0b3dfd55a7c24e29e46343fd606080a504989c4a36170d60346e915cb1ccb810a496e1db240db6de41cde83fead2db1726148f3e3f04
SSDEEP

768:3/zGU6X6x2QdHdddddddddddpBKosckR430Jkp064XsiBL4QOjBStL8Fq5+AJqLU:vH6qKoscH30OCXsiLGagY+Aoazzt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c86fda6c0c78378c0341b97555f83f0N.exe

Files

2c86fda6c0c78378c0341b97555f83f0N.exe
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

SharpUp.ni.pdb

Sections

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ