6eaae4c23ee230479bd21c39e8391a60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6eaae4c23ee230479bd21c39e8391a60N.exe
Size

6KB
MD5

6eaae4c23ee230479bd21c39e8391a60
SHA1

1c939c1e940150be25ce4e45d2a599948d01e1cd
SHA256

6506f0bef3f1954e2c6bd433fdc62f144364b17f1c08574d044436d8f87c9d5c
SHA512

89ddb15b408e0ff4fe98ab7bbeda56569ef229505bfa3a108e9a74a6f2fde3333f46867e86b7b9b3d65c754c7f52f07c76ef3518c56711e4cd12644ac9129775
SSDEEP

96:sH+lj9YDhx/cHyTqc8AUbCC+Arz88ZKOOBOJob0w9Y4ptOK:sHQYb/ZuF2A88ZNTkP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6eaae4c23ee230479bd21c39e8391a60N.exe

Files

6eaae4c23ee230479bd21c39e8391a60N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Temp\seoc1l-j.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ