b6752c91f8773f8895e5fd7b7a11e390N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6752c91f8773f8895e5fd7b7a11e390N.exe
Size

12KB
MD5

b6752c91f8773f8895e5fd7b7a11e390
SHA1

639a8a010ee1a08dbbbcdc5e6188be4e440741f1
SHA256

002e8917cca2a51cc4ea17e44afe26698d94e97833a13cc984d5204a518903e7
SHA512

aa836388ec7202f3074cf034e3f32cb619aaed9e3bf453cddd737f73bf25ebf3aeeb51f08621f82ecc503822a0738952994b96199531ef970df0521edebd0742
SSDEEP

192:DLlUnHa/N6uBWTBAZzWXunFRGGL/ds1T94oe5AeZ2twE9NINHOveAte7XQN8jPZF:u2N60WTuzWenFUGL2n4oe5Ao2twE9NI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6752c91f8773f8895e5fd7b7a11e390N.exe

Files

b6752c91f8773f8895e5fd7b7a11e390N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

App_Web_khmgqbon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ