b2f28dca8e809e521e356e9b9584c310N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2f28dca8e809e521e356e9b9584c310N.exe
Size

59KB
MD5

b2f28dca8e809e521e356e9b9584c310
SHA1

7a0c9eab7ff980923fad5e4b097882ecfd7c722c
SHA256

0ea6fe1be219f20d86383d7f8104bb66dfd62bd69dcc656f3d049cac0283834e
SHA512

8aaeef75a638387a7839bc7b6e67fc2c6dbce3e5f4028191a69ebee32d55ad56614b17cd255f9f0a14ba68fe9c3b734ba4224b2c9ce535467daec50d4d2bab70
SSDEEP

768:mLDCFvBsTNyAiPf1DsTGLaMQYIO0wW7GZ4s7WWP:mKDS8AifauaMQA0wW7E44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2f28dca8e809e521e356e9b9584c310N.exe

Files

b2f28dca8e809e521e356e9b9584c310N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

rJtWHc7
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ