1f86f519632ab5b9cd2e9011f9cca3f0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f86f519632ab5b9cd2e9011f9cca3f0N.exe
Size

13KB
MD5

1f86f519632ab5b9cd2e9011f9cca3f0
SHA1

577a6ac0a22cc22ccf881d8db3044b621f57bd0d
SHA256

1a830cf35ffe47377a3d7919770cced938875a47226749a9dae8d57f2dd8f75d
SHA512

3caf38b349e0c3ee657975ae41fb968f6c3de76a2e79cf2d1c679a830655d0e18520200291734e2775be6f773b75ec4f4faa496b0b1097e31bc97968387818d3
SSDEEP

384:LiAl5YeZfLePg1sVjpTwTpTmxOtKX7Lt:DlpfLwuIVM9KxOtKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f86f519632ab5b9cd2e9011f9cca3f0N.exe

Files

1f86f519632ab5b9cd2e9011f9cca3f0N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ