3b2694bbf9b8dde51dcb329c33c4fa70N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b2694bbf9b8dde51dcb329c33c4fa70N.exe
Size

730KB
MD5

3b2694bbf9b8dde51dcb329c33c4fa70
SHA1

5d638f2064bf2ce5b87f72abed4a7a240dd11b8b
SHA256

f9f45a201ecc01b36c3c500f0e42746a5265198181b494d821ae3cfb1b470e7d
SHA512

fe14ea6900f7d0722c0cb1b1bfe89a1dce53b65113c73f6ce6312fb0618b6e7a0f2f2612bce61d2dbd24a32e4a411ddfa1f4a127ab16e695413b5bfc43f10c39
SSDEEP

12288:BlQ9IP2EyZz77XC1eVr1lz9ifnTfExyRM3XTjsXZ6M6CZvHnRgF8+3ZxBjvrEH79:BlQiPI7LCeV5fi7f4ym3XfyZ6M6i5gST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b2694bbf9b8dde51dcb329c33c4fa70N.exe

Files

3b2694bbf9b8dde51dcb329c33c4fa70N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ