1957589973fc08a4d529d62856ca5e80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1957589973fc08a4d529d62856ca5e80N.exe
Size

55KB
MD5

1957589973fc08a4d529d62856ca5e80
SHA1

98a243d921516b48483361cbb06b14091915a089
SHA256

8695bde22466c2b2df1b27a843d1856abb4fa11260a88cd79861476f87ad84cc
SHA512

6e8715f5d80f9cfa393329e7cc39d207c4ce0ab9df03e5355a21c3c55fa9773d6f24bd40a78e2ee3eb06525eb6a952859792328f9ead2c69f70d2470b0341295
SSDEEP

768:ooiDf3mTLUqCCYeb2HtphMtFpzso4thRCCl1OZp3AHA0bFXP9QhAPzl+Fhu:o5DvmTgqCz62Ht3MtAoQuwS3AJFfDv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1957589973fc08a4d529d62856ca5e80N.exe

Files

1957589973fc08a4d529d62856ca5e80N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Skatepat\Documents\Visual Studio 2010\Projects\Shadow Calc V2\Shadow Calc V2\obj\x86\Debug\Shadow Calc V2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ