5d9807c1baef07383d762222e2f78a20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d9807c1baef07383d762222e2f78a20N.exe
Size

11KB
MD5

5d9807c1baef07383d762222e2f78a20
SHA1

2fcf50137ab45c1bf387823675f425df2665054b
SHA256

dfcee7d0ab6565c2d76e7dd5314cb06342d5d60e8a6eee936a52af6b248d1b55
SHA512

c984110570646081800321812181e9cc234ef4c962344a26ce37b92c36866eb1511e303aac80b85be206c9ccb33e66b00ee2501e16d079fce144a1b06695afcc
SSDEEP

192:GE1pOksxF1FRTn8gJxYucx9NOojhsKwo9tXuEyoB0Xl8FQ+y9fVf0USNPEoSv6mp:GE1EksxF1FRTn8gJxYucx9NOoHZdypV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d9807c1baef07383d762222e2f78a20N.exe

Files

5d9807c1baef07383d762222e2f78a20N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ