b91faac8d31af79ee9b3888e37d2d220N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b91faac8d31af79ee9b3888e37d2d220N.exe
Size

92KB
MD5

b91faac8d31af79ee9b3888e37d2d220
SHA1

3eabacd50c19cc6137c36d8931bb67b9c2f7e2f5
SHA256

eae0b40cce505ff5c302cb3e8fedb3f138607f33eccc516337910c9ddfe88d5a
SHA512

8abe32a99234ab32ca04957415a5e8f5bfb58a48b1df446a80981e1156de1e4717fb9f28fe7bf1322a484a213b91b9c892847fc34ccc1b01693a4e867da430bf
SSDEEP

1536:mSx6rCaAg+xyLEwKUfqxvJz3jGGFomTk0MP:mSx6YnaTyDaGqmaP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b91faac8d31af79ee9b3888e37d2d220N.exe

Files

b91faac8d31af79ee9b3888e37d2d220N.exe
.dll windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.IO.FileSystem.AccessControl.ni.pdb
/_/artifacts/obj/System.IO.FileSystem.AccessControl/Release/net9.0-windows/System.IO.FileSystem.AccessControl.pdb

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ