191fc0122e084234e9d5ad70bd1c2720N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

191fc0122e084234e9d5ad70bd1c2720N.exe
Size

44KB
MD5

191fc0122e084234e9d5ad70bd1c2720
SHA1

8bad1a68afe4634ba7d28ff9062820aeb50e369c
SHA256

7eca6b7f14bddd57c25cdcb3d43482b233fa9047d93a674527f97553fe0b917b
SHA512

99c827d4e75f2f6e9a700922f8be623ad406503674e1f0ec5906a1197b201d4590290633bf4fcd9f5faa27eaa9a64e8cec3d80123d2493ba5570a10c0cd06cc9
SSDEEP

768:4++q+f7OU7vjiaOomKpdi5CjUUtvTq1igeFFDv/g+xJnzctSiEwQen88FfyMvR3y:RLbQOGpdi5CjUUtvTq1igeFFDv/g+xZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191fc0122e084234e9d5ad70bd1c2720N.exe

Files

191fc0122e084234e9d5ad70bd1c2720N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ