5bf6e45ccf8197dee7addae13d549e00N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bf6e45ccf8197dee7addae13d549e00N.exe
Size

10KB
MD5

5bf6e45ccf8197dee7addae13d549e00
SHA1

e07016255ee67192af2091bfe73aca4a7e2c4ed2
SHA256

3814e279a01b45af82062b917d6483e71bdf780e191d9d0fe9603a5fa5fe0fd3
SHA512

f17642fbc0095f1ddabb14bb35c79651e97271927603b1bef7d1a2fc680d8c6a3b6b933de1fe44ca0d78d46062e02f03e0a4215d20518c1fa6d4e2a878785574
SSDEEP

192:0aUgkgKS6rUyj5N7YZIgoAfE1CMvlDTqJzoOX5C92K66BncIl:0/gkgKSgdYZ1fE1CMtDTKzHX+nN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf6e45ccf8197dee7addae13d549e00N.exe

Files

5bf6e45ccf8197dee7addae13d549e00N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\ducbb\Working\fhi\ehis-hiv\dieutriarv.vn\Source code\fhi_ipharm\DataTransferLib\obj\Debug\DataTransferLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ