e9aafdebb9aa0b71d4d76ef61b3525b0N[.]exe | Triage

Sharing

General

Target

e9aafdebb9aa0b71d4d76ef61b3525b0N.exe
Size

277KB
MD5

e9aafdebb9aa0b71d4d76ef61b3525b0
SHA1

433f25cbc871161b6932f8b062b676cba4f56dd5
SHA256

cc8ded54da036acb120fe0d64bfbee799bec4be471fb2b4172b34506bcedeb90
SHA512

12fcf9645c787fa6a4a7ca95cc742791fa4bb9710c89cb942201078b174e9c469a158a11029a3abd8a2f18d84cd1ccb68a7b20b7976e9299a73576eeba75589f
SSDEEP

6144:Hg82HgBAg30HxbNkQbbU90mvLwfiREEO9mC5Ke7SWSb+PNsLPFP/rdnTmMA:+HgREHxBkQU90mvLwfiREEO9mC5sZbBN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9aafdebb9aa0b71d4d76ef61b3525b0N.exe

Files

e9aafdebb9aa0b71d4d76ef61b3525b0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Documents and Settings\mmichael\My Documents\Visual Studio 2005\Projects\FirmwareUpgrader\FirmwareUpgrader\obj\Release\FirmwareUpgrader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ