68f4ddd982836d53e1b30112e07d4d50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68f4ddd982836d53e1b30112e07d4d50N.exe
Size

44KB
MD5

68f4ddd982836d53e1b30112e07d4d50
SHA1

cbb24eafc60863d7928c0a85199c97b6e75b2e0e
SHA256

81cd0040138e4ec7b28585d2ae92d3d05a41c1b12ac1cedf0f1ab95c6504f9b2
SHA512

a92fdde7b7b9e5d8b93879cb186bea58074a94213de1e8d5c971c8364d6561a08b4fe3b9ac2074c14e5a3c79bf924927b50a7e3da0379b7d628f131e8d21e0d3
SSDEEP

384:XarwTsXQIsZnExjjXApoY/DmBESCdFuhV40drLlnYNNHBTdyJYvr90M5vW7pq9T9:XarwTokVExQz/nbpuquvGTN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68f4ddd982836d53e1b30112e07d4d50N.exe

Files

68f4ddd982836d53e1b30112e07d4d50N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\src\Fex\FiddlerExtensions\SimpleFilter\obj\Release\SimpleFilter.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ