296f638542fcbc09b455e5a1ee4a8cc0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296f638542fcbc09b455e5a1ee4a8cc0N.exe
Size

767KB
MD5

296f638542fcbc09b455e5a1ee4a8cc0
SHA1

d28888dbd88ad844ed1c4bb9d87ae07677cabd8d
SHA256

88ccd857b58ecbd298bc49cd31f163dbb5278e0588e5f031c242c45be2dab8de
SHA512

6e3194ff0f7ab670fd8cf39c99d00ffa70e143c710542be9690fb0ee4457091b4e2d7f0d5f48f643b86250daeec2d3a67c1bee7fee8ebd699adf978b8a36a291
SSDEEP

6144:PurZcSXi851p7BMdNRneNMToeGY9vkjEh0q6g:gjicEcgviC6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296f638542fcbc09b455e5a1ee4a8cc0N.exe

Files

296f638542fcbc09b455e5a1ee4a8cc0N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ