8d06aacd7c4f05a91bb63502376a70e0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d06aacd7c4f05a91bb63502376a70e0N.exe
Size

13KB
MD5

8d06aacd7c4f05a91bb63502376a70e0
SHA1

3f343be2342618f0a97e91bc39492adb1683c33e
SHA256

f0c44e69cffa87287b05dc2db26f015ee038b7912cf8f0d401a5295313d66459
SHA512

13a46a0290786a3f4de4bc4b11d00be3da35eb69a1bff2798fb2bd416ae00e2b132e76153e75cd8b0f7f9f96d5a196b592a32b7be71b1e533379a859e3f13fb8
SSDEEP

192:EJ6/G/MlRgyhadiceeus8kk6Ebm5aZ7Ck6wIksqgd2t4q5UWsoN8IY:sXMLgQsq7rlbmMZL6/4B5lRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d06aacd7c4f05a91bb63502376a70e0N.exe

Files

8d06aacd7c4f05a91bb63502376a70e0N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Work\floomby\src\clients\screenshoter.rf\scrrec\AudioCapture\obj\Release\net48\AudioCapture.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ