1a670dba831f062558b580d20a11ab30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a670dba831f062558b580d20a11ab30N.exe
Size

6KB
MD5

1a670dba831f062558b580d20a11ab30
SHA1

94ac82a15a2801d3efd682e0524de3f1c5ced28f
SHA256

6601b5f350657a8d4caea8aa45e39ffd06091b50fb2d82c9df627024476c61c5
SHA512

f8994406834ade79189d3fb0cf05de6b2218ca9cafc9faf4956ec34e75c142997de5a0040514c009fa56aa07f1941f52c9b5e98bb18e1a0477898b34ec917de8
SSDEEP

96:ZniIVVk+vmdiGPtkPfOI1M9UTnwoDzNt:ZtVVk+vLG6K9UTws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a670dba831f062558b580d20a11ab30N.exe

Files

1a670dba831f062558b580d20a11ab30N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\arsh\source\repos\fxckMBR\src\obj\Release\fxckMBR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ