8b4350c8af8110bc9fd1625cab0b4a20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b4350c8af8110bc9fd1625cab0b4a20N.exe
Size

164KB
MD5

8b4350c8af8110bc9fd1625cab0b4a20
SHA1

5257ae0f9dcf7f0ac3a90e1198ba36cf1decffa9
SHA256

358a6e0690fb88e930647ce7eb6a6b683c468a405e8f633d1b4ec4b91be3f6a7
SHA512

3ea722edec8ae1716f5e2b5a24519d9a674047426d002fbee39c89768a677e394c88613f0f1bdc1c8de731c3931025d2457ee3589f4459dd6aab1e90429bdd91
SSDEEP

1536:N4eK+IFjWfoPbuaTRM3nFkwHbaA3LL0idWwiQcmWkF:G+IF6foPCaTRMXbaev0FQcmWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b4350c8af8110bc9fd1625cab0b4a20N.exe

Files

8b4350c8af8110bc9fd1625cab0b4a20N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\WORK\MONEY\BOT\NoName\PsiX\obj\x86\Release\source2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ