81b22966409fc2af5909523bb48b0700N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81b22966409fc2af5909523bb48b0700N.exe
Size

68KB
MD5

81b22966409fc2af5909523bb48b0700
SHA1

2850cb51be44d94ce6053e02a8795fe23b2c2bef
SHA256

cbcc9d5380e409893a19baf88268e4d238772259559ac1f599b8f1c6990af38d
SHA512

d0390575a3cacb36e27d25bb5096845c76b393bb09612e6347d845b04fe1cc121a8fc4b6d98f9159af8f6628aa1d000e0a8c10262d7f80b7a4e0204bcdfe7b76
SSDEEP

1536:k0Aq9UXP1doNO5W05P05UeN8Nyq2aHY2fiEApeE112wQX6e:nAkAhHHY2bApesA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81b22966409fc2af5909523bb48b0700N.exe

Files

81b22966409fc2af5909523bb48b0700N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kato\Documents\Visual Studio 2012\Projects\dbtest\dbtest\obj\Debug\dbtest.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ