545fc76097ae8b4966a7a4bcef9e7e30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

545fc76097ae8b4966a7a4bcef9e7e30N.exe
Size

472KB
MD5

545fc76097ae8b4966a7a4bcef9e7e30
SHA1

794cd44ccf7bf3f856169a09c78c65fbb49685d7
SHA256

4a1b714ee61a50eb5b0c1394316be584cb2e80991808e9a4df15953249b40140
SHA512

ff212eee5c883a6985f97fb33a249111ea6fc9e36f29ef687d60872527866deed3fddc4b3ff1c3330368232c3512f34efa26b381f7bd5d3e31789d46f7bac89a
SSDEEP

12288:PDB2Mz4ehFrdKYcMhsg2qBqOdEy1sITk:l2SLhFrdzJd2qBqATk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
545fc76097ae8b4966a7a4bcef9e7e30N.exe

Files

545fc76097ae8b4966a7a4bcef9e7e30N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wibu
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ