e18fba08f3fddb754a03192ab5239700N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e18fba08f3fddb754a03192ab5239700N.exe
Size

48KB
MD5

e18fba08f3fddb754a03192ab5239700
SHA1

7edff02c41b2757f6ca4646355fed7c4a08c28c7
SHA256

9f1b607221237f46728c555d50cc0377836b45d9c223d6dd0d498e739d77df3e
SHA512

a4001503edcb98bb1cd0bd75f395dce256fd014dfe18007940bbf41da05cd855b9b9a4c244858ab18b0da4bf10e7f907c2b38b90fa2fefb6133b8fdcc20f2fe4
SSDEEP

768:5exl81nX6ZxlvUAa7KoBv7epginbCe7AXjuw9tL0Duxj7tr+BreFS:5exl81nK34PJepgqcVzk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e18fba08f3fddb754a03192ab5239700N.exe

Files

e18fba08f3fddb754a03192ab5239700N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ