402696f665e6e69600bd8e7197172340N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

402696f665e6e69600bd8e7197172340N.exe
Size

640KB
MD5

402696f665e6e69600bd8e7197172340
SHA1

f7cac6619db6976fb413903653c6965715b66822
SHA256

a9d453c717e8e5a9a97fc490fa534cfd9a7710a96167b651db362b960a8f422e
SHA512

8d5acde1897ed4ed0c45c9242233849499366e9e69b64a899120de510169ef2a1b198549a8454d398f456a51da3138eaf93140cdc8121c7d6eb14b3468da43d0
SSDEEP

12288:yoQyRAk2F72CUVggHS29/wHKsqEObgdm47LdZ2LJ8UEjgapjpFBYAzZy:fR2F7VuozH2i/tYLWUkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
402696f665e6e69600bd8e7197172340N.exe

Files

402696f665e6e69600bd8e7197172340N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tLsi.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ