0cf46ea72500db3733591a82eb0a25e0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cf46ea72500db3733591a82eb0a25e0N.exe
Size

1.3MB
MD5

0cf46ea72500db3733591a82eb0a25e0
SHA1

f1f38510688b50af9f67ea49f2e58560184cd6e6
SHA256

0d9e0e1b8c8738bb8a53cdcdc8649fabc3e2b2de77a33fe7ad78e8e26cb8b1bc
SHA512

34a4d585284ac15637f1bb4a00a06964dd0905858d6490d7ba05f22797c6d27eaf6fb19d49c557e967333b80acce07ff1315a973c99e46429a8a0a554228e1de
SSDEEP

12288:+jfMID4FQQAsjoJGrHMlzSVbZc6K4TA8xvEjoJGrHM:+DMLFQQAsjoJbSVtc6JTA6EjoJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf46ea72500db3733591a82eb0a25e0N.exe

Files

0cf46ea72500db3733591a82eb0a25e0N.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Damon\source\repos\TEXT\TEXT\obj\Debug\𝓥𝓸𝓲𝓭 𝓔𝔁𝓮𝓬𝓾𝓽𝓸𝓻.pdb

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ