b642216fd2096175212b60eec138f410N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b642216fd2096175212b60eec138f410N.exe
Size

1.6MB
MD5

b642216fd2096175212b60eec138f410
SHA1

3d9ca690aa49b43f919f4656cc9a1baac559a03a
SHA256

5b76600d23fe68843c420dd17a756075b652f075869669c3289e698945d821ca
SHA512

18c2d43b4eb17c1b92a05ede2bd64d5e3c69bed9a47254696f1cb14fb784a147359799da0d4653df346edd1dea65deb3371672cdb56afd40a335aa88ba6c0f09
SSDEEP

24576:9nluDKnxYaXJi2Y3MpbwnCvzb4cbmYdTyVDi2lmW4R:2DkYOMwwnMb4PmyVG2MW4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b642216fd2096175212b60eec138f410N.exe

Files

b642216fd2096175212b60eec138f410N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

dfsvc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ