80a590bb05d568475a4e5e7d15579ff0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80a590bb05d568475a4e5e7d15579ff0N.exe
Size

2.5MB
MD5

80a590bb05d568475a4e5e7d15579ff0
SHA1

c7c3ca3d8d9cacae57cf15a23a0011ea2652ee1c
SHA256

ab2d60afea326c9f3cd267992808e32b2d3f5988a3a91ed4da6daf8fb9b8869a
SHA512

2cc529425adbaca8d2ca15d89cb2f7f087d0452da50f14ccd98a1384d1ffd59bb6615ab53d921f1f4a952dbe97e0aeda20f6ba14313910a1610e024ee8824cb1
SSDEEP

49152:lF5ljKbtL2tLvL9IW1dXg3S/MHmgBoJdXN0BMOwLloBrug:QV2VvL9IW1dXg3S/MHmgyJdXN0B7+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80a590bb05d568475a4e5e7d15579ff0N.exe

Files

80a590bb05d568475a4e5e7d15579ff0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\_Bld\10657\7994\Sources\obj\Win32\Release\EvaluationContainer.csproj\Microsoft.Mashup.Container.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ