8b4221593075684366e50f580e308240N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b4221593075684366e50f580e308240N.exe
Size

62KB
MD5

8b4221593075684366e50f580e308240
SHA1

b152020fb32473ec2ffa419f0eae69dd03ed051b
SHA256

fbfebb368e36cc9737850afd33adf5b9b17a36450d4579c8a2f872f04e4974f8
SHA512

51b7b7fcde6377deae46111dbdcc7c223999adfc6282d87cef6f00f31262385bdde0fc3c624e9b1da9b739e399ea7ade43510343ba7180b5031a8b2b0374e038
SSDEEP

1536:Rnv/gL+2QFRRdUvyclckc3cqcaWDWQcicnc2WWvWK/PTTn8MrwmY+vkKJ:Fvw+2QRdayclckc3cqcaWDWQcicnc2Ws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4221593075684366e50f580e308240N.exe

Files

8b4221593075684366e50f580e308240N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.mvid
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ