3b5b61e405c359ecffe2769122e0ca40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5b61e405c359ecffe2769122e0ca40N.exe
Size

10KB
MD5

3b5b61e405c359ecffe2769122e0ca40
SHA1

e7a6d60066e2a4c19d416575b046e8b7c9d85048
SHA256

c3b0309ce71be88871bef32e11073dd6d916fc61a49e7c7b1a5b5d4916e3e6fa
SHA512

c8b2b60f1dc703e81116e334eecf8d97d9a5e0f38e48f54b89ed6c1ddd7fb5e544631734458cfa10f07b8445ac3d9e214d1016576fc5a1b9088cf7e97cacb9ef
SSDEEP

192:+WjL85aY0w7RKmX2T6PUQNjbY5ow55sCwN/:k4Ym/QJ0ai5sCu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5b61e405c359ecffe2769122e0ca40N.exe

Files

3b5b61e405c359ecffe2769122e0ca40N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\PSJ-IMC\DOTNET\TriTech.Imc.Data.Common\obj\x86\Release\TriTech.Imc.Data.Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ