2f85858079cbc0f5579e9786b385acc0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f85858079cbc0f5579e9786b385acc0N.exe
Size

1.7MB
MD5

2f85858079cbc0f5579e9786b385acc0
SHA1

686fc70cfc32cbc58eb174b7fbfb295ede0c3baf
SHA256

620342884a7df7af9dcc9abe67625034d96060a675c4aae461e0da924b7357b5
SHA512

adb0e1ca802de70c0bc44b8c970b08188fa97b484f0a731d4efcbcdd72c5832ae7f1e6259eb4a9ffb8908ad6fb5c996fec65349a8e9ef3ffcf2e9f3052c9e6b7
SSDEEP

24576:dSOclGMkylWT9+dSOclGMkgZqhae16CGbfxEXYGaKqM:dNUkn4NUkgZqhaK6zbfqdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f85858079cbc0f5579e9786b385acc0N.exe

Files

2f85858079cbc0f5579e9786b385acc0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

LoadMxf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ