e49dbf40f0db13a71ae661a58f902480N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e49dbf40f0db13a71ae661a58f902480N.exe
Size

7KB
MD5

e49dbf40f0db13a71ae661a58f902480
SHA1

089fd47a150f0259bb8d721c1d50f97d4314fee0
SHA256

20f2b775606b0abe949a595351a57914826829d2468b42bb77cba7e4b0f241a8
SHA512

8ead88b8dfd6ef9d2cdf9c4c79ae21dc9aa8fb820edc72a732039cd70266149052f13b91da352924d9d4d34c4d7f471eed450e7d0c51125f9dcbc7a3b27504c8
SSDEEP

192:/NA+3yokZWt1/okbbMANNr302a7hQqxIzcyR:QWtx7bPN1+azJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e49dbf40f0db13a71ae661a58f902480N.exe

Files

e49dbf40f0db13a71ae661a58f902480N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\GIT_Repo\shared-encryption\src\Shared.Encryption\obj\Release\net40\Shared.Encryption.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ