0e390b9fa8bb6347c4c91fafb48b76b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e390b9fa8bb6347c4c91fafb48b76b0N.exe
Size

7KB
MD5

0e390b9fa8bb6347c4c91fafb48b76b0
SHA1

28644c7815c4c2bf26be72bd57ab07cfe843c213
SHA256

8157dec6766990abff2ebe5d23271814136a1f6cd19d52816fda74787ac97f68
SHA512

2b662ac50dd695b6263edb87ebe155872a777c7800423e38fa57773b8e268aac2daedacf80ff30d9d06dd33c0b62b8313d083f6351e57179dff42122703a0e52
SSDEEP

96:f9BDVfWbkqdjl3WNtaYc0Pk4OjlNSr0Pk1YHAd4sLYWOa:HVeJl84Ycek3ur0M1Y4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e390b9fa8bb6347c4c91fafb48b76b0N.exe

Files

0e390b9fa8bb6347c4c91fafb48b76b0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Aziz\Desktop\Fud\Fud\obj\Release\asd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ