ca49a393b83d8bf2167ba4bb801d5700N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca49a393b83d8bf2167ba4bb801d5700N.exe
Size

116KB
MD5

ca49a393b83d8bf2167ba4bb801d5700
SHA1

3b6627ac46ceb796a4b360973824ca822fc20601
SHA256

3ccc4e736fbb5e3595ff3be48f781580b3f2f1e06697fbeebad11bd8038c7b2d
SHA512

26109a2cfe359d3804b6b244f9b8cdc06c7cf9611b93c06bf0cdfa9db1a9211c237d7679c42152e3d5e0a3933211854504c9684195442ee1045dda93af0e4de8
SSDEEP

1536:TPQc0IiI+7vAIIzuQ8Tr15WUkTdIOzq0ZDFtnJvx/m/Tx:bQc01zAf6QGkBIO20ZRfv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca49a393b83d8bf2167ba4bb801d5700N.exe

Files

ca49a393b83d8bf2167ba4bb801d5700N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ