936e0a4cc11c9967ac7bd91be4e8f7f0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

936e0a4cc11c9967ac7bd91be4e8f7f0N.exe
Size

468KB
MD5

936e0a4cc11c9967ac7bd91be4e8f7f0
SHA1

720377cd7f4545e06a9ccd56253ff2a846b49e4e
SHA256

ea051ea965af46dc038783dd52df7c2ff4d4340b8d6a024a171b24e1d7cbcf32
SHA512

9f57af3edacc299c4e10095c3bc3c42459b47f900afc6d7fdea972483662f7ecc8db213e086bae6915a96d620acd85986cf3a03e6b757226652222063699d69f
SSDEEP

12288:lUR6NKflvJJ6oYijTqd5v3Pxez6k5P0XzjL:4yaw5vfxeWXzjL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
936e0a4cc11c9967ac7bd91be4e8f7f0N.exe

Files

936e0a4cc11c9967ac7bd91be4e8f7f0N.exe
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Threading.Tasks.Dataflow.ni.pdb
/_/artifacts/obj/System.Threading.Tasks.Dataflow/Release/net9.0/System.Threading.Tasks.Dataflow.pdb

Sections

.text
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ