a24c8a2dd4faa7873e94f63f34d955a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a24c8a2dd4faa7873e94f63f34d955a0N.exe
Size

529KB
MD5

a24c8a2dd4faa7873e94f63f34d955a0
SHA1

fbbe4a43a12bc2e9a24dc56265f63692597abbf2
SHA256

9f89ff17e0d496178dda48a0f120f6f4d21cba4d57b3255b3be5a16c59af03c0
SHA512

141826f5626884be3a21e507e987e1158d1058bcde115f1915b6dd15a638168a8ec68f45c6bbcba6b3fadd070bc56d86ced0f50c9854f1c3b8792838c6c7c655
SSDEEP

12288:z8Fc9rgqEqe98TCZkWRGh/jONOsHWv6PBfzFHTPGlW3qmzN5npv9DhWYd66mVDoS:4glEqWbAj+vHTzFHTPGlW3qmzN5npv9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a24c8a2dd4faa7873e94f63f34d955a0N.exe

Files

a24c8a2dd4faa7873e94f63f34d955a0N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\kakao\work\Source\LEGO_AAW\LEGO.App.Launcher.Square.CheckMaintenance\obj\x86\Release\LEGO.App.Launcher.Square.CheckMaintenance.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.2{+
Size: - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.c7T
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0;6
Size: 525KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ