de13cd699b267c63c2b3146bf059cb40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de13cd699b267c63c2b3146bf059cb40N.exe
Size

240KB
MD5

de13cd699b267c63c2b3146bf059cb40
SHA1

d52dce8c7690e28e17c6c8f9a8a2cca54dd87c8d
SHA256

5f8fd747e694efb3a9ee4cdd20936acdfd4738cbc1c342194276e0647bb108c9
SHA512

203c7d7709dee90500dab1534448ce83c49b02d201d9258111a553b48fed8680e0fbb9e5fa7d64c059378935fe9761772588fd019cac48f014f21c86e47e80ed
SSDEEP

6144:9hbZ5hMTNFf8LAurlEzAX7o5hn8wVSZ2sXw:vtXMzqrllX7618w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de13cd699b267c63c2b3146bf059cb40N.exe

Files

de13cd699b267c63c2b3146bf059cb40N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taz
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE