38ec5eaa1fda1b846ffa8a0524d645d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38ec5eaa1fda1b846ffa8a0524d645d0N.exe
Size

196KB
MD5

38ec5eaa1fda1b846ffa8a0524d645d0
SHA1

dfb6d6f7b17f602f1b7c498b0aea6c195bf85439
SHA256

3cea102af3a3de122bb7e2af89fd4fa0ed9a2f818b89f64e18cc40ece3829e9e
SHA512

006eacf44fed8676d100d6ece042bc9a92c1adc115e4912a9c9407edc7b9dcdbfdd354cdd3792c06c8c3e25c22c7f7774ea0622507f30e2bae8e249870fd86f3
SSDEEP

3072:5e+eoO6OaiMZiMdQWpBe+eoO6OaiMZiMQfA:5e+eg7Z7rTe+eg7Z7QfA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ec5eaa1fda1b846ffa8a0524d645d0N.exe

Files

38ec5eaa1fda1b846ffa8a0524d645d0N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ