4ef1790398fb9bf4da3e701fab161390N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ef1790398fb9bf4da3e701fab161390N.exe
Size

7KB
MD5

4ef1790398fb9bf4da3e701fab161390
SHA1

ac5e6fd878bf36eef385afcc0dd89ab0c03ee668
SHA256

c72b739f2785a0e60d79213ea7ec191c482e374defb7d1b053baa73dc5aaff58
SHA512

552f42fd6edff3e4f7249c51c24ec315a837e749cd89d018ab33ba10064cc49fb2dcc9e607fda0bf81752f9e63b0aa86a7c74ad240732f43bbb41c16af34e076
SSDEEP

192:o/1F4FOnYVlPtmRCGaGgJbvUs6oXf0uPf:yL4FOYXaCGGz6Yn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ef1790398fb9bf4da3e701fab161390N.exe

Files

4ef1790398fb9bf4da3e701fab161390N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ