dbced8e1c5efe2ef75f22e77a6ab2200N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbced8e1c5efe2ef75f22e77a6ab2200N.exe
Size

36KB
MD5

dbced8e1c5efe2ef75f22e77a6ab2200
SHA1

24a4dde42fbf3d4a3a8e5fb1fd8280baf0e101c1
SHA256

292cb0acaba6e28424d7883ef5f5e27fbdea8af7f8885c62c79701038b307ed1
SHA512

46e923b812f9db3afeaa5655da1e66a667f47d1076e1d5d3429162db476c5ffc23b852abcc41b69cdeafc80a9e7911f94c7ddd08137255ef065cd1990f4b04db
SSDEEP

768:Kh+FiR5Bmg0RNtQ7q8DPUgaASnLN+6zQ:MR5vmNOD7aAOLN3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbced8e1c5efe2ef75f22e77a6ab2200N.exe

Files

dbced8e1c5efe2ef75f22e77a6ab2200N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\3e76fb81\82b3a62e\App_Web_7xnarqhd.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ