2d319baa8d16dbe7d8e5fccfa27e7530N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d319baa8d16dbe7d8e5fccfa27e7530N.exe
Size

260KB
MD5

2d319baa8d16dbe7d8e5fccfa27e7530
SHA1

02fe17e57a19306b7fff103d85abfa1cec6a6ed6
SHA256

c1bde1f63be5e95914e09f332972c3ee41366e94334582b201ff57cba5093092
SHA512

6f4f9abc2a8bee4b6d4c868d1a23d711e63828991ffa4e5f00c5ea267440934f7eadbcb058f633860ec2cd58499f0e81b8f2cfaf17e6f13a7eea4306dded4d7d
SSDEEP

6144:lun+cTdNrStQ56eA6IDK1UtSDK1/t9o8mD:0+GdNm+smD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d319baa8d16dbe7d8e5fccfa27e7530N.exe

Files

2d319baa8d16dbe7d8e5fccfa27e7530N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ