ae637b26864779470e4887dc5377f790N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae637b26864779470e4887dc5377f790N.exe
Size

71KB
MD5

ae637b26864779470e4887dc5377f790
SHA1

962ba18189bd367b31b960850cbb609ba2087bdd
SHA256

31b1551ddd8d8213119833fa1f5469b010ad5a27e907772ef33a5f73c0e810af
SHA512

5582a755f01f0804b85e6c40a10b0f17a3c53f3878f5cb2848841c9fdd4492f17323a35f8acdd1044201d4ebbb8675f247910db14d16910c1e290bf368e88c8a
SSDEEP

1536:X+5bxgyi9AVATUayohhJAB+AtRDTUayohhJAB+At/:UbxgyiPTf6B+AjDTf6B+AB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae637b26864779470e4887dc5377f790N.exe

Files

ae637b26864779470e4887dc5377f790N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\BuildAgent\work\7b0904889d901aa\BBM.HMI.Tray\obj\x86\Release\net6.0-windows\BBM.HMI.Tray.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ