44bd836dd9c3025950b20a773cba3a50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44bd836dd9c3025950b20a773cba3a50N.exe
Size

3KB
MD5

44bd836dd9c3025950b20a773cba3a50
SHA1

85a8784e6e14ec34c63568a49097e8da84f502d5
SHA256

df30c7729776791dfb27abd96a127d186953fa21009012f09d19e481b34e0a8e
SHA512

2fa3a96e48b737db2f6314f4959ccc5a6d2f65e41c0598014056f25dbf768b6167aa45c3c1deaa25c44e3c59876049210491a7195ab0b62a3dc72fbe9dee6237

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44bd836dd9c3025950b20a773cba3a50N.exe

Files

44bd836dd9c3025950b20a773cba3a50N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

HierarchyIcons.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ