a2d8e1f9ef6a0fdd1d596707c3e3e2d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2d8e1f9ef6a0fdd1d596707c3e3e2d0N.exe
Size

4.5MB
MD5

a2d8e1f9ef6a0fdd1d596707c3e3e2d0
SHA1

1e89c0816a3a3047448bc49d8986b297a805e223
SHA256

24c7fae1c3b7297f0d1ef03b6a23ffa16fb1beccab8be12568236cd853cd9c83
SHA512

c94b249c4235f2db9111b1082e52015dbd8d6ee81e9d4973abaa9edfa5b21590ff568dbe6a2593378e597d48fa55880c21302ca1024632d71ef3f6a246a34d45
SSDEEP

49152:BsKCUQlcyTuriARkc1DuM/reZ9yWLwsaaLSvh5XHxXd2S0+wqWa8elUU1yi81TJ6:BsK0cysvDZ/kzU9D81TJ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2d8e1f9ef6a0fdd1d596707c3e3e2d0N.exe

Files

a2d8e1f9ef6a0fdd1d596707c3e3e2d0N.exe
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Microsoft.VisualStudio.DesignTools.Diagnostics.ni.pdb
D:\dbs\el\ddvsm\out\Intermediate\Xaml\diagnostics_x86Retail_9450FFA1\Release\net472\Microsoft.VisualStudio.DesignTools.Diagnostics.pdb

Sections

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ