5b0171781e29f6ca5adcbafc8c8d7000N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b0171781e29f6ca5adcbafc8c8d7000N.exe
Size

2.6MB
MD5

5b0171781e29f6ca5adcbafc8c8d7000
SHA1

dc7667e270b6aaa5365be14b4de29d9b512f6d01
SHA256

56648dcd69a144c8c82f255585671ea6d842cb0d8ca2346da318f9a632ac4177
SHA512

9013a899d6b8030fabf39c327f1d8148a1731eb8e466bc863ea59e8dec7e81427618d8aa7e9000f7c3f4689e9ac4b1f9332a67f58b7cc17966bbb84f610d271a
SSDEEP

24576:Ms/CrM7U9//9DywymjneG2FyE8i187HQSUZud4cdesCegDfFYILeg0fJAWpBm:6Mq//EVj8DJ/d4cdesCegDfFYICDJfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b0171781e29f6ca5adcbafc8c8d7000N.exe

Files

5b0171781e29f6ca5adcbafc8c8d7000N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\repository\ict_main4_h\src\PSSCT\obj\Release\IctConsole.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ