caf1e47d31566d2bba26ec89e20451e0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caf1e47d31566d2bba26ec89e20451e0N.exe
Size

39KB
MD5

caf1e47d31566d2bba26ec89e20451e0
SHA1

b238cc5f2299c4bd0550e22d83a6d43b9cd0406c
SHA256

4ab7b98b041266e325fe1ae5f2f51bfc1c2666297246cd8b5aad12662a8c7e2c
SHA512

b32af12d3754e9e369ca65c15658c55209a716b03e85320a0739198773dd129efedae42d266abfc9b9cf7d22ad6b8862d3962bb5743ff58e2ba707f8b86a638f
SSDEEP

384:GcQ8Q/B3tjh8ACXjc/LLXOgXWeZ6DeRNEx7Yxe2oyYFTTleR94OElxWZ:BW8I/L7OHeZyLYkyYF6DH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caf1e47d31566d2bba26ec89e20451e0N.exe

Files

caf1e47d31566d2bba26ec89e20451e0N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ