3d506390525960b90f96148310750c90N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d506390525960b90f96148310750c90N.exe
Size

153KB
MD5

3d506390525960b90f96148310750c90
SHA1

93875d0cdf2aacdf9723afbe59da9e1464af52f2
SHA256

ab1578dc2f96bca8705e9bcf0d70eb8d8357a812c930a55104dee0a95a5cccfb
SHA512

7c05512857a17d16d40cca956a4762614e50c02ea66328e586b1574d430e55255d6966599ad30b42eb3c90078c9523788d0854de413f3fcbdb7aae10706395eb
SSDEEP

3072:mckXqisq0XK2/1TCz4PqLxIbFabUS7H47PTcmBqKLmV:Pwsh5/1TCaqL2b5SMTTBi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d506390525960b90f96148310750c90N.exe

Files

3d506390525960b90f96148310750c90N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\z004x2xe\Source\Repos\src_client\SRC_Client\src_client_sw\CCommon\obj\Release\CCommon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ