c39c0a507d858da05f632b99186430d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c39c0a507d858da05f632b99186430d0N.exe
Size

132KB
MD5

c39c0a507d858da05f632b99186430d0
SHA1

3e9578670437ae70a6c28d858b2d8f3355d7c1fa
SHA256

ea2cff17a44ce2b6f4486f95ad6a3351f45e55b1f8a0c2e7b932d818e8a72531
SHA512

78ec1225b43176d7d643e19217cffed7041c7230628307c9e3ddaea7a7ad64cfeb6d1c9bf8dd2059b786653507d47f64b3e4fbff558b506e650673ff01564057
SSDEEP

1536:ScvNuODaAOLN3cwnc/soQTy7FLG6X8U1ui3c3gXdfST1:PvN2AN/sbTyBL3Pc3Mf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c39c0a507d858da05f632b99186430d0N.exe

Files

c39c0a507d858da05f632b99186430d0N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\3e76fb81\82b3a62e\App_Web_slaqnov6.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ