5e56aa369f9b18d5559da9b4ab4a4fc0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e56aa369f9b18d5559da9b4ab4a4fc0N.exe
Size

1.9MB
MD5

5e56aa369f9b18d5559da9b4ab4a4fc0
SHA1

f4bbfc17fa5935a91188f4290b5a61288539fd04
SHA256

141eec15778318fc0dc4512d158dd35db988cf00b48c8dd3747bd37427144288
SHA512

a99fb8942a494267f4b4d11e9753f0f5e09c897dfa0589e4eeb7bc24b697aabf9adcb97f423193e3095768e5a3e9c36c41e886a3dc982fbc5680c2a8d969bc30
SSDEEP

49152:9TksDmCrDR8z1L/agi0T9VXN6LVVXG6L:dks5vR85L/agi8PXN6L3XG6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e56aa369f9b18d5559da9b4ab4a4fc0N.exe

Files

5e56aa369f9b18d5559da9b4ab4a4fc0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\administrator\documents\visual studio 2015\Projects\NASCAR 15 Launcher\NASCAR 15 Launcher\obj\Debug\NASCAR 15 Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ