04eb5220f7d49967abd241b7d1305ed0N[.]exe | Triage

Sharing

General

Target

04eb5220f7d49967abd241b7d1305ed0N.exe
Size

5.0MB
MD5

04eb5220f7d49967abd241b7d1305ed0
SHA1

765970e8fb9c7e306c9bbe20f816b8f143a1e232
SHA256

6359aa408276731df5b47da14a98ebc3fd3d99b00f4386d9ee99787a622c41fc
SHA512

4700b6b6ac13ceb0f11e8a76fd7c5a312839b5ce0ef5ed41db22c7358a653d7706110ca9455436890dd8eba39976a68b74b682e41c36ebb70744e46098a25fe6
SSDEEP

98304:jgmjKDb77FQSsbxkrqa/sJ41vFpdvUdhsWBY42DCp78zH/e5:BbtFGrshF3oCpyH/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04eb5220f7d49967abd241b7d1305ed0N.exe

Files

04eb5220f7d49967abd241b7d1305ed0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ