9915d46cecd7db28d2a962a9b39acaa42c0affd2c8420837fdeca6020646d53c[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9915d46cecd7db28d2a962a9b39acaa42c0affd2c8420837fdeca6020646d53c.exe
Size

3.0MB
MD5

4ffefe6002b10b540c0d931ceb4598ea
SHA1

ab4019fd89a0e9d9718b25d3af49f56943bcfee5
SHA256

9915d46cecd7db28d2a962a9b39acaa42c0affd2c8420837fdeca6020646d53c
SHA512

94f6879b304d031d5ee5f7ba40de3f9b35b799ddad730b3b80f0d815aa9bad1e86673240fc4ba54da2f770191f912027058fa803a2f827191f85e0a2583e3d1f
SSDEEP

49152:2IR5ewy5cawF2YSwvQLe4WYxIpAStC6zxosAn+CVls82/pa52:7sDSaMt5vO7xYhC6Nopn+CVlk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9915d46cecd7db28d2a962a9b39acaa42c0affd2c8420837fdeca6020646d53c.exe

Files

9915d46cecd7db28d2a962a9b39acaa42c0affd2c8420837fdeca6020646d53c.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\1.jx-hai-ngoai\4.Autoupdate\Autoupdate\obj\Release\Autoupdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ