b3089015c96c15f09407f708d930e990N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3089015c96c15f09407f708d930e990N.exe
Size

464KB
MD5

b3089015c96c15f09407f708d930e990
SHA1

977a471dc4b9b1e12a4f4c9007bd94bd3daf088e
SHA256

8bcc5155d826b55c1e1715cb8287a541cb926e20e08438dd684e91a44884e159
SHA512

def5c05b60512be04033251f3069fa0a73a1a5d90d46147b41495015e5b28eab3ab983ae94c90a6cd5cf41bf0ec28a62619ad3cc4f5054b6866d28c8db30dbf2
SSDEEP

12288:D8lc87eqqV5e+wBV6O+LUnILeDJssH0g0mCL8L:D8SqqHeVBxTIyqg0L8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3089015c96c15f09407f708d930e990N.exe

Files

b3089015c96c15f09407f708d930e990N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ