c16144f71c022e818b67c0127b35ed20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c16144f71c022e818b67c0127b35ed20N.exe
Size

132KB
MD5

c16144f71c022e818b67c0127b35ed20
SHA1

8f96f70e9b348678cf06668e5ecb843fdef86cd6
SHA256

11fdaf5f0aeab9a83c9789418bb3630dd9c62e6ce1c420baa31d4a5057379869
SHA512

3024389cfb85c0ad4a05ea4aacddc17af0dc7641aa90ff0320ea13b3b6ef62e5b7f8419724d54dfef5e9bfb8483b443a3ed7031c19f549fc6b84863ed01e04a4
SSDEEP

1536:rR5bmNORiaAOLN3cwnc/soQTy7FLG6X8U1ui3c3gXdfST1:rR5CN0AN/sbTyBL3Pc3Mf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c16144f71c022e818b67c0127b35ed20N.exe

Files

c16144f71c022e818b67c0127b35ed20N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\3e76fb81\82b3a62e\App_Web_pmmxdy9u.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ