40e09e624c7b9f452346ee9a601736d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e09e624c7b9f452346ee9a601736d0N.exe
Size

1.5MB
MD5

40e09e624c7b9f452346ee9a601736d0
SHA1

2bf1ed2d803b1e0bb8d7c8ae339e7ceaf496a34e
SHA256

d91e05914b9d5a65c61d27c20aeaa4b918daf988a63cf13f37dc9b8032300f5f
SHA512

877d23c15b83df86ec0cca01c5ced78e005054be2ad1f5698997715d495fa5baf1cd3812a5a50766c54c0510e0c1f5bcb07187ba9096c412d00b2552655270d5
SSDEEP

6144:RlOO/CChlwYsmPT28mEeUOnuO+aBnQwEk3lcLow3WEfdu+Arg:RvYnQwEk3eLow3WEfQ+yg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e09e624c7b9f452346ee9a601736d0N.exe

Files

40e09e624c7b9f452346ee9a601736d0N.exe
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\\binaries\x86ret\bin\i386\\msvcp140.i386.pdb

Sections

.text
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ