950a4926ae367734ca76d40e83ebc1e0N[.]exe | Triage

Sharing

General

Target

950a4926ae367734ca76d40e83ebc1e0N.exe
Size

2.4MB
MD5

950a4926ae367734ca76d40e83ebc1e0
SHA1

4f54a51650b300900c863bb51a51eba8f8bbfd9b
SHA256

9adf90dcfa0e072e7b1f0897b6bf0de68eca77abeaf93531ee27fb594196ea30
SHA512

479b26b7b99c2c873fa424d37b973b4b1d42b1fdacaf4e82bf63e81c4ff4479e421e8f902fe0fbdc1be8e11d23c06f3f33eb49bab8cf71ce583191663a15019d
SSDEEP

49152:gr1GmDKv+yBtjgMi/RB+Ge8uqG5B4sB+nZSbBJlD/ebA5rOYiZni:grMPvRBtkFd4qG533bBXD/ebSivZni

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
950a4926ae367734ca76d40e83ebc1e0N.exe

Files

950a4926ae367734ca76d40e83ebc1e0N.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ