93ca00b2639b23a714e6c20ad4955240N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93ca00b2639b23a714e6c20ad4955240N.exe
Size

639KB
MD5

93ca00b2639b23a714e6c20ad4955240
SHA1

946c95593cb5fe3f45ffc903a9cea25c18d8fb80
SHA256

0e029b2d630a9d73743729656c43f579cfbfeaa9d8b6e61caaf925da0f9598f8
SHA512

3cbda4e2e3c2f5dc921a3ba1d2ef1caa22215159eaafa574b95bd20adc3413a8fc5646038cb5f2d581dfc9635118bc49337d863c5aae0d2420dc83ba1925fcb5
SSDEEP

12288:k1pbfUSnIJKfJrvpC5raJqoiWcVG89gwX860eUg128T88RzkU:k1pbL6yL2rKiWcVGS8heP128T88VkU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93ca00b2639b23a714e6c20ad4955240N.exe

Files

93ca00b2639b23a714e6c20ad4955240N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Build\21\51\Sources\Re\RSlvr\Dv\Client\Endurance.Re.ReSolver.Client.Shell\obj\DebugGated\Endurance.Re.ReSolver.Client.Shell.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ