0d9ccf58bca7dee8f7bdbcf8f6e1de40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d9ccf58bca7dee8f7bdbcf8f6e1de40N.exe
Size

672KB
MD5

0d9ccf58bca7dee8f7bdbcf8f6e1de40
SHA1

bfeff0d57d71c313c0308dbc2076d40b5ac50026
SHA256

8074dfc8cb8be5e8e952412cae2e9a93e7522beaca9a8b5d404c541b76120023
SHA512

2faaa2e9ca4418b91bcd3ff08ab107f2a919d6679b972adbba001511a66532a461fc428b856302779cdc0822b0bbf28df38e82d42a62356a6e1942fc4763ac6b
SSDEEP

12288:C6hEKsb567WMjtcZxzNSHXT1M97wycfStJOZmHfN6tVEEzew:phEKst+QZxzNaXTWhwPfEJdEtV/9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9ccf58bca7dee8f7bdbcf8f6e1de40N.exe

Files

0d9ccf58bca7dee8f7bdbcf8f6e1de40N.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uda0
Size: - Virtual size: 351KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uda1
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ