bef088c83426c73cead21c2a5ed08200N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bef088c83426c73cead21c2a5ed08200N.exe
Size

338KB
MD5

bef088c83426c73cead21c2a5ed08200
SHA1

4039cfa94dcd83a88dd66a3735a150f4007dbff7
SHA256

fa17fcfb1817e948fc7342b8eff624f1942e19adf3b6028935db14666ad382a2
SHA512

589ba6e5d0c6f81d1a54ffea13b236383e6d11f52d222dc9580a33212c03537917cc3be2317ded6570ed11194cc4b9101c977cd8e469b7baab5c92f3296ee7b5
SSDEEP

6144:mjx9uzeueU5QREfaYr2jtbJuAoc48dugqiTMOosBUweBf:mjx9uzFeU5QREfaYr2hbATBMq+MYUZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bef088c83426c73cead21c2a5ed08200N.exe

Files

bef088c83426c73cead21c2a5ed08200N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Rehm.ViCon.Common.Components.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ