5cfaf1b5d8f94532ebcd149ebb683b60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cfaf1b5d8f94532ebcd149ebb683b60N.exe
Size

14KB
MD5

5cfaf1b5d8f94532ebcd149ebb683b60
SHA1

f9e88b2c6e3c5f72b90443360b0830017310ed61
SHA256

63c156111c8835d4c148f428564af59149dbb6459fc1df9b9a38c20909144a5c
SHA512

172d3250c34f0398406f61740fa3c284a28b456ec2fac38bf4b2ef2852a37102197441bad9c6733f64fa6448df72aac6321edc2dd5c870ac3ef8d11589b27d55
SSDEEP

384:vsqjnq1egOi2/LePgz99qYJP1tmLxOtKX8t:vsmnK8/Lwa9qYJiLxOtK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cfaf1b5d8f94532ebcd149ebb683b60N.exe

Files

5cfaf1b5d8f94532ebcd149ebb683b60N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ