79d645a426513508eb3c5816d5aa0910N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79d645a426513508eb3c5816d5aa0910N.exe
Size

81KB
MD5

79d645a426513508eb3c5816d5aa0910
SHA1

80700cd88e49df0ffa192899216ed3f1bdbb3aa3
SHA256

ce46e9f502897b3f46b351a016e442ee88dcfde93f6bb19f8dc8c914d61ac728
SHA512

ebb16b9216ed750105b15b608190cc8becb2253ac60c27522bbea711674e2fe557757face56a1aae1727393b1905468fab9c9edacfdd55c75c0004e2357f084c
SSDEEP

1536:nAFrcys9o/ZmXRIYfNb3TLz0K014XI7yRD:AFrcys+sCsNbzJ014Q8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79d645a426513508eb3c5816d5aa0910N.exe

Files

79d645a426513508eb3c5816d5aa0910N.exe
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

CrashHandlerNET.ni.pdb
c:\GitLab-Runner\builds\7T3Fb4iX\0\audials-com\pc\3rd_party\CrashRpt\release\CrashHandlerNET.pdb

Sections

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ