f4c0916377e26c096d910569ab1962b0N[.]exe | Triage

Sharing

General

Target

f4c0916377e26c096d910569ab1962b0N.exe
Size

33KB
MD5

f4c0916377e26c096d910569ab1962b0
SHA1

b69d4456f60a3cbc6cb3c298740ae084450ebfdc
SHA256

f956d635e9a33a80f6dfb881a74f70677291fe654ad5f2e5c8a2e5afe9751299
SHA512

a0b7e538d1fc9be1fd1c4fec7970469727e0bb7f439e36194399a7936686bc3c4ec73676872fca1e9e6cc9678c38f4bbd30f19e45738320c404b15e20ef1ea77
SSDEEP

768:JUkHM4vZssD9qCPdyGYtYyUMWgqEgE5KhlfpuF/jBTPGvDaJxh:JUks4bTyGYtYelgE5K/kqbap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4c0916377e26c096d910569ab1962b0N.exe

Files

f4c0916377e26c096d910569ab1962b0N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\Malware\Shane Kinch\Library\Bee\artifacts\1900b0aP.dag\MirrorsAndReflections.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ