6dcec88e9b4cd00178236875c6c9f140N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6dcec88e9b4cd00178236875c6c9f140N.exe
Size

12KB
MD5

6dcec88e9b4cd00178236875c6c9f140
SHA1

bab0b7a0a99f2d93ecf8e381fad1f2a4bda120ea
SHA256

15bfb336b7f0af433f34ae231518d2d842a7c0717d5e1dd4d357ddf7c7caf044
SHA512

bc46f980b0a8b0b5d411394e29808509aa246c91cfd54c85ff3b037fdc554ffd4946a180242cbe6849f1780754316ef896f04f7b3f69c64ec744093006fe1d47
SSDEEP

192:WTcnQ9ZhTTqaJvMTWKui8mSX/vryFEKejkOEgpL:kbvTTxJkTWdi8tX/vwejx7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dcec88e9b4cd00178236875c6c9f140N.exe

Files

6dcec88e9b4cd00178236875c6c9f140N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

App_Web_in_incdetails.aspx.f9d3913e.zgmbnkzg.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ