442af037494589c3650e57433bd5abe0N[.]exe | Triage

Sharing

General

Target

442af037494589c3650e57433bd5abe0N.exe
Size

10KB
MD5

442af037494589c3650e57433bd5abe0
SHA1

3f7d4cf0379645f966d3d0859e528eba2e025657
SHA256

e328b8d0f55aabed1fb26f50ee0df9fb5875b86b5d2c8aa064489234720cc299
SHA512

797fc435aaecc30079d7350327fcddf94d1a5371872277082afc27f83709c2ee7cf561aa321d4274909f69b017406a30979c7c8bf36cb7da48107249905c9a86
SSDEEP

192:8HtO3x/q2NIu9TFIW1PnaZGMeEsB+UPLWqE9:4MxPGkTfnaZGzLB+df

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442af037494589c3650e57433bd5abe0N.exe

Files

442af037494589c3650e57433bd5abe0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Sam\source\repos\sihost\sihost\obj\Debug\sihost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ