2c3d992fc168846896ff64aaee9b8d792b0c34781b315d9b70e019e9b0e790d1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c3d992fc168846896ff64aaee9b8d792b0c34781b315d9b70e019e9b0e790d1.exe
Size

16KB
MD5

1e735887f80976cc792db8e080a36678
SHA1

a1b5d830f84eff74ebd7cf9dbddc2980c1d4a78b
SHA256

2c3d992fc168846896ff64aaee9b8d792b0c34781b315d9b70e019e9b0e790d1
SHA512

84fec744522c5e437d817f9785aa0e38220e7be438ddcca4282a246ceb839cdeaeb2a95ac3ed0965c02cf128b09aa518461698b8565298e96f706e5756f8a22b
SSDEEP

384:xdhBs/QvUKSlWqp5xpNS9C3LHtI6MGUnE17uMcmlrlCt6f/7KJc49:HnsQvUKhqp5xpY9CbunY7uMcm1AqKJci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c3d992fc168846896ff64aaee9b8d792b0c34781b315d9b70e019e9b0e790d1.exe

Files

2c3d992fc168846896ff64aaee9b8d792b0c34781b315d9b70e019e9b0e790d1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

H:\Programar\AC_Farmautils\2021\Enero\14\AC_farmautils\Ac_farmautils\obj\Debug\Ac_farmautils.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ