ff15004029d2b63da4009518e1d98a40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff15004029d2b63da4009518e1d98a40N.exe
Size

95KB
MD5

ff15004029d2b63da4009518e1d98a40
SHA1

fa80bb245ba432899f38c7af51da9bf84432e9bd
SHA256

6ce93f4dae87537c8c5be3812cd2550323dcfe652c3aa99f69a1ec194c56efe0
SHA512

171ff3f5a8a2f4f421dd41cf7327e99ff1bb249ea45fa0dd0c38be2c4417de92d28016299267345b23c93a8242b8f611516ed028221e8cfd8492afc775950d1a
SSDEEP

1536:S8jc9LaykgCeAdZuZY/9JK/r7GHCbPUeN93uv7/0TbA3OKaQSDOxgtM4idF:S8ALamu4YvK/PGi1ZEQQSDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff15004029d2b63da4009518e1d98a40N.exe

Files

ff15004029d2b63da4009518e1d98a40N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ