7c5214be9dd4d177e9102b39c77a9ba0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c5214be9dd4d177e9102b39c77a9ba0N.exe
Size

32KB
MD5

7c5214be9dd4d177e9102b39c77a9ba0
SHA1

31f3eb3f880377111973fdf527089597cd7b8003
SHA256

c0af9542001e3ad6fce6298024510c91ba035b7e72cd53655b011bb63bce34b3
SHA512

cfb5db85914e919b269f3db0b3f642a7765e389331df8156b2051e9104eade8cd10fbfe256c23f0301c95ca3ea096b785b60358ae6d59386477a1048f4ffed7f
SSDEEP

768:dhJUG1DBJn6eUQpM/ucboTSaSItk9v50V/:d0yDBxzrNOv5u/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c5214be9dd4d177e9102b39c77a9ba0N.exe

Files

7c5214be9dd4d177e9102b39c77a9ba0N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BuildAgent\work\7b0904889d901aa\BBM.HMI.Contract\obj\x86\Release\netstandard2.1\BBM.HMI.Contract.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ