6a0d23ed63c78e95ccffece4434bfb10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a0d23ed63c78e95ccffece4434bfb10N.exe
Size

2KB
MD5

6a0d23ed63c78e95ccffece4434bfb10
SHA1

8bd9bd26ad9acb929941fc2d1d26a3c5e33c4baa
SHA256

a9ba699491a6561454f025582cd7663d0e4a2b8830c27ad73e75023bcb6aaa64
SHA512

da1aeee16ea1fd2fd96ca55119ef1fd0c3b0ba4ccc6d12beeee9f97fbab456f723daa6a4d1ade0a2e92585efe67b96433edb97d2a6dc344b800c50ce19685ef8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0d23ed63c78e95ccffece4434bfb10N.exe

Files

6a0d23ed63c78e95ccffece4434bfb10N.exe
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\algernon\AppData\LocalLow\Colossal Order\Cities Skylines II\.cache\Modding\Burst\burst-aothd15v3po.11z\LineTool_win_x86_64.pdb

Exports

Exports

burst.initialize

Sections

.text
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 279B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ