879c59cb1c335fa1d2aa76dab40b25b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879c59cb1c335fa1d2aa76dab40b25b0N.exe
Size

21KB
MD5

879c59cb1c335fa1d2aa76dab40b25b0
SHA1

8d4db85456135faf54f54c95f20157ba94037bcf
SHA256

d6468749f9ca09ea1053d3771303a420062f7d09d8ad528efe3913050f42c523
SHA512

a8a757e09a8facecb90d87ad1d804af0bbcd199f377c77313ed2c8f5c34b96e331d132783568db3059311ef54a3d370382bf58448ed247ee048899e661614811
SSDEEP

384:qCxxAkibIhcnvPcVHET9VlqeyABqf0uokwzwAVzrSgbLpbGo:qTIhivPcVe93Jd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879c59cb1c335fa1d2aa76dab40b25b0N.exe

Files

879c59cb1c335fa1d2aa76dab40b25b0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Yannis\Desktop\developement\Vison 5\windows client\windows\obj\Debug\windows.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ