42fc4e9d3c52254f784a6ea115c20a60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42fc4e9d3c52254f784a6ea115c20a60N.exe
Size

78KB
MD5

42fc4e9d3c52254f784a6ea115c20a60
SHA1

d8926b98aa33e764eddfe28b72f43ec2ebecf329
SHA256

c9bdd6ec75c830450bfc49a31e9e1906ba8413425b0bd2dca1f7c71f9e9561d8
SHA512

343ab42a3e71221bcb0cbeb472a4230668c6f4ecd9a927d4f8bc8389e7e04653962f44eaf29572be593df06d1c51aa020a0549269919d2f2f1cdd294160f75c4
SSDEEP

1536:wtQdDAY7o/q0KfhLb6CY7f0jrX1u8Jzx:f8Y7oC1hblYAX1lJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42fc4e9d3c52254f784a6ea115c20a60N.exe

Files

42fc4e9d3c52254f784a6ea115c20a60N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

G:\Projects\Registration\Registration\obj\Release\Registration.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ