cde30c3caf74a8a18b120fea1ef45630N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cde30c3caf74a8a18b120fea1ef45630N.exe
Size

410KB
MD5

cde30c3caf74a8a18b120fea1ef45630
SHA1

585c938e265f4ddae95b5cd2529ce72c9ff1b7cd
SHA256

cb2f9fa3c5bdd144e017f2f27c64e663a3b15631fe5dbb623089c7e2b3f9a84f
SHA512

93572d3b2a739727a300946815d9fa7cb5ed0f1ac3e306e9827a44fea13de9839301932cc2495eeb942393cac00374457faf2d458de1522441047fb6f7e10e45
SSDEEP

3072:cagNP+nl8RNbnJG2j4hziFRENUsQpNZTF1WhWi1OLF/8QdXXAtKPWBwJ5rP6gWGf:1qo2bnJzqiFRENUsQVR1WRsqtdOg2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cde30c3caf74a8a18b120fea1ef45630N.exe

Files

cde30c3caf74a8a18b120fea1ef45630N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\TeamCity\buildAgent\work\46974854ba4a63f5\build\obj\Release\.NET Framework 4.5\NLog.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ