1324cd3a91ce4088f2f32577587897ce04860b6e788c5cd3b81279e7ceccc866[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1324cd3a91ce4088f2f32577587897ce04860b6e788c5cd3b81279e7ceccc866.exe
Size

124KB
MD5

51ae68ef325bc334e23e07b4ab4e2684
SHA1

122104c47069b315d9e16df18c54f60b1185b0d6
SHA256

1324cd3a91ce4088f2f32577587897ce04860b6e788c5cd3b81279e7ceccc866
SHA512

e9419eeac3b247336e11e3fa0dbf7f01316c01d315df64ecb2b6cf64135fdeb5f0d9ae644a909f3b7e8b9af63d9dad5a4f99d8d1c205cb0b563baa063ebaf681
SSDEEP

3072:Xso6F9YPOHTUwZ+l5hjEClFWXOoUnDEzsLnTxtGPXJtE:b6F6ACI+WXJz6TaXg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1324cd3a91ce4088f2f32577587897ce04860b6e788c5cd3b81279e7ceccc866.exe

Files

1324cd3a91ce4088f2f32577587897ce04860b6e788c5cd3b81279e7ceccc866.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cscript.pdb

Sections

.text
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ