5b47063fd9223d5539609abb082e0f05e79eb13b85ffa528a00bf8416adf587e[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b47063fd9223d5539609abb082e0f05e79eb13b85ffa528a00bf8416adf587e.exe
Size

778KB
MD5

c5df945c3ea2933105b7dcf30658ffdf
SHA1

9a6b318df640087842f7f1b7e4ce49e2f8062c31
SHA256

5b47063fd9223d5539609abb082e0f05e79eb13b85ffa528a00bf8416adf587e
SHA512

68da617ceb2e12e14b1c62086303e2e9370c94788be5855ba0bb1fa308d8899dab2624a975bb00d8f60d093c194b472d7f1c92371782b6c165f966440ca5a4da
SSDEEP

12288:Mbs/2iNLJF0/JcqvA/u3wFImD9ztMdIIODjnIa8Skbngn1jNx8piMbLnhzL:Mq13EOYA/1FImHi3bnie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b47063fd9223d5539609abb082e0f05e79eb13b85ffa528a00bf8416adf587e.exe

Files

5b47063fd9223d5539609abb082e0f05e79eb13b85ffa528a00bf8416adf587e.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Client\Temp\ZuBNTqDPWq\src\obj\Debug\LHkf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 767KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ