6a67fa93cc67d49cb1c440e1c21f9860N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a67fa93cc67d49cb1c440e1c21f9860N.exe
Size

32KB
MD5

6a67fa93cc67d49cb1c440e1c21f9860
SHA1

0ed39a0b1ee637a5864fecdc9a4b53fdd98d3500
SHA256

19a69456e1ddf877f500daa0c0b643f7c99017cb668d82f0fdf394485f7fca6a
SHA512

faee847a80f9bbf0bef7a15915f5047b3ca8d99d8260187c29049e9cd016a8e3ffa59c41ce9c595bb7a8c828552bac3a4fa3e2c4c4c4faf4d036dd6cd71fbae5
SSDEEP

768:Wj1b3suKzD3S8AktYcFA/Vc6KB5YiR2yAMxkE4GP:FzDC8AY8Vclv7jx9P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a67fa93cc67d49cb1c440e1c21f9860N.exe

Files

6a67fa93cc67d49cb1c440e1c21f9860N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\rsStubActivator\rsStubActivator\rsStubActivator\obj\Release\net462\rsStubActivator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ