dee731370c9a0e54a54e6807fed0e590N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dee731370c9a0e54a54e6807fed0e590N.exe
Size

62KB
MD5

dee731370c9a0e54a54e6807fed0e590
SHA1

2c0bf4a2c63d4f45540825d1a9d7608af6f79113
SHA256

d23391fb86884505f046c9fc14e6db5722ff27b0238d9822d34285c1fc2badad
SHA512

f725c0533768414adf7ec1a65a92d486d30a81262473e24f8ac01e03c4c8f3dacdb43f92db8679fff15d56f627d920997d555b2483a5214a7e551e6c7c222b5a
SSDEEP

768:73fEYRMZ6ZpfqnmAxLc9zSfWKbIiOKwEn6gNH7zz+Aq6w:73fjRo8fqLo5SfWKbIiOKZBNbzz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dee731370c9a0e54a54e6807fed0e590N.exe

Files

dee731370c9a0e54a54e6807fed0e590N.exe
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ