0ffd2a7b8cc40516bac22b269b4831f0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ffd2a7b8cc40516bac22b269b4831f0N.exe
Size

1.8MB
MD5

0ffd2a7b8cc40516bac22b269b4831f0
SHA1

58478ef7e45231df5f0640530c8dc91b04ae7cb0
SHA256

bcc7836685fc910d3a2c69cfd5e689e51944d6a0b90851be9fe3df4506669056
SHA512

ccd1a7378a91587648309d62fd969818c8e13e27e2591db58cddfabf925e1a79096c1321dbcf12ee750ba2a53075655e5b01166a034a7b0a3630157a21485aaf
SSDEEP

49152:04usu8DkYOMwwnMb4PmyVACIabjKoh9WlmUi6AjW/MUSdGRf3/:0NBYOXwnS4rVtIabjKoh9W2jxAZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ffd2a7b8cc40516bac22b269b4831f0N.exe

Files

0ffd2a7b8cc40516bac22b269b4831f0N.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\msosrec.pdb

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 480B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ