4e40f6de7d6bc85018e8eb8f63f89c90N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e40f6de7d6bc85018e8eb8f63f89c90N.exe
Size

115KB
MD5

4e40f6de7d6bc85018e8eb8f63f89c90
SHA1

724a3805952532629d16cf29929f5da2428d59f3
SHA256

b2b0f78945dce137c48472e57640f8603c6fd7a1ae573f056f366a62eb57d43d
SHA512

0b2dbe48b7f891ea085b21f148fa3480649ee82a720596b993beea8a2e8ddf4c76cdd3a4275a3f3f6df3bf49b11d2e8bf6c5f505304860e15ab1dda8d074aae4
SSDEEP

3072:dCPdAGV0NGNObPiRYUkAY6I223c5nQ/sZF:OVvY3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e40f6de7d6bc85018e8eb8f63f89c90N.exe

Files

4e40f6de7d6bc85018e8eb8f63f89c90N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dev\OptimizeInjections-premium\WindowsFormsInjections\obj\Debug\WindowsFormsInjections.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ