c88fa2c8011add37da8959c3a3e56c10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c88fa2c8011add37da8959c3a3e56c10N.exe
Size

80KB
MD5

c88fa2c8011add37da8959c3a3e56c10
SHA1

2e754018bf1c1470c3d7bfe9111d07c5eee8f9cd
SHA256

0bcce0874f30d8d38fabb4fcc1bb44fc60d811c7ff1ae3d3869601d44d65a80a
SHA512

def40ea38dd24cd77e94dd8b43e55098cdd23e62fca54ec7f0a0f8aa3a3311f968b40768e74f723c279241d2bdf0c3883133be8cdaff7bcb700d5838de030484
SSDEEP

1536:uHAyLYyoO0Xo0Yz63aoH7dzEkTc6Xpr+z9WjAblGzQ0Sv5aV:uH5LeH7dzEkTc6Xpr+wAblG6AV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c88fa2c8011add37da8959c3a3e56c10N.exe

Files

c88fa2c8011add37da8959c3a3e56c10N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\1\s\SharpWebServer\obj\Release\SharpWebServer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ