a2542ba2ea7f0aeef0da3045d0347810N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2542ba2ea7f0aeef0da3045d0347810N.exe
Size

217KB
MD5

a2542ba2ea7f0aeef0da3045d0347810
SHA1

399630fcbf25a168be5dc49133c73e6568885af4
SHA256

62b36e5a81999ffcb9e7e28cc7fa88bc44009d99b99c7032afd069b76ae09a45
SHA512

1635443b3c929233f880a22c72498d1e13e57311c9b52b4beb7230dbcbc0c690acb8b7c7316601bf9bac18ed74e693c653d37aea9479f6ab960308c76a63e820
SSDEEP

3072:N9btHaPtplt8192FDjTZsBmWayL5Cg0rBBOojL78kTFxdpu/hIMLbq8O3EtmWhfc:N9btHa1a21ZHvIIBOM8kTkuUVRtlSVhX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2542ba2ea7f0aeef0da3045d0347810N.exe

Files

a2542ba2ea7f0aeef0da3045d0347810N.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\coretech\source\kimi1710\amt\esd\src\products\adobeupdater\aum5\bin\win32\release\AdobeUpdaterInstallMgr.pdb

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE