bd39267759d67f3b9c34be91744c0af0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd39267759d67f3b9c34be91744c0af0N.exe
Size

4KB
MD5

bd39267759d67f3b9c34be91744c0af0
SHA1

b4f0e25dd7daebdca90a8b5c17fc35a261119c41
SHA256

be52f4cf26bc92576725ecf75b7af93710915d1223987a2f63e3e2dc0983a995
SHA512

e549b1480043fbb309cdf75541ca594b6997c515ff6a22b1ba989219f13d550081419db10da3acd334068c1db91c90979f2bc247f67af1ab0b615220f2cbaeea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd39267759d67f3b9c34be91744c0af0N.exe

Files

bd39267759d67f3b9c34be91744c0af0N.exe
.dll windows:6 windows x64 arch:x64

aeff5632c524d51cf96073f3f2eef12d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ExpandEnvironmentStringsA
HeapAlloc
HeapFree
GetProcessHeap
Sleep
CreateThread
CreateProcessA
GetProcAddress
LoadLibraryA

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 1024B - Virtual size: 997B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ