b4f0c7ed0bf68555e56f29544bdcc260N[.]exe | Triage

Sharing

General

Target

b4f0c7ed0bf68555e56f29544bdcc260N.exe
Size

122KB
MD5

b4f0c7ed0bf68555e56f29544bdcc260
SHA1

8cd7afd67d1153afa7ffc018d8ac3edcdd0f92ac
SHA256

48f7f2a4bac633fdbe2dd481bcea3474cacfda98ce8fefcb5a75db6455831286
SHA512

14b6d83dc7ad5a526ad30532207c62765487fbe29de2c1f46536bca82b2298fab45022de5e5475a97d662dbdb1b38c4bd3bb1f9c248015fb64696b7b5806b961
SSDEEP

3072:lFmaNynMT7rchMu7ppeup3B6ZaXu1xDN2ZAMK5W1jQaShY5wiJ5X5:lZNvHrchN9AuSZXL2jKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f0c7ed0bf68555e56f29544bdcc260N.exe

Files

b4f0c7ed0bf68555e56f29544bdcc260N.exe
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ