6a5017c0883562992aba22c7c451d3c0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a5017c0883562992aba22c7c451d3c0N.exe
Size

7KB
MD5

6a5017c0883562992aba22c7c451d3c0
SHA1

eaae827a0615be566abfaa08d821af6ffa2f5bec
SHA256

15ae2084ee8b8d54238476fa8010242429e56c0498c5507b14b91992d53e414e
SHA512

02bf3d4004daefc36aa8d744f87c0e79e74c782cf4e3410c0d3ac1c2f7d2b9b3580262c6ccdbc6d3c418ebc9d4294976c0c963af09e59f66937855afa1930372
SSDEEP

96:lNhS9qX/KRoVL8rH7QZG4kJjaGbG0AKWbET8F2srcsNGtm:lShRoM7QY4kFaGbG0TEO8F2soe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a5017c0883562992aba22c7c451d3c0N.exe

Files

6a5017c0883562992aba22c7c451d3c0N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\1808caf3\815a85fa\App_Web_test2.aspx.c2633821.bktfsimg.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ