57cb4e36d4368ec6a0499f09594ae030N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57cb4e36d4368ec6a0499f09594ae030N.exe
Size

1.7MB
MD5

57cb4e36d4368ec6a0499f09594ae030
SHA1

53327d2830aa3ea2f79b71e7ccf4aab6db53d124
SHA256

9184014d9d2596bf93e9002d2191a2e48bcd6ca18c1cd0ba08908c87a0749908
SHA512

acf3f3ebed71d6c35600555d754941eddf9a5aa2bd964ee2897cff7de4351a03aa496c780754dd2651738ed8a7de1bc9e101413b622435589d7b1471d3762a58
SSDEEP

24576:554GXbvxdXVav9Mk7k54GXbvxdXVav9Mkoc+lPYjsVXpmaewsAju:5HbvxCv9MBHbvxCv9MRNVZZlju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57cb4e36d4368ec6a0499f09594ae030N.exe

Files

57cb4e36d4368ec6a0499f09594ae030N.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\_Bld\10657\7994\Sources\obj\Win32\Release\EvaluationContainer.NetFX45.csproj\Microsoft.Mashup.Container.NetFX45.pdb

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ