56de1d8df6ae45020384769b97bfb520N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56de1d8df6ae45020384769b97bfb520N.exe
Size

164KB
MD5

56de1d8df6ae45020384769b97bfb520
SHA1

20d34a6fb0bbddd4e3a8d710af141561f55ce0b7
SHA256

fbd3b488ac923b2e8b83ed5d6ddcad1bf9b79f9c614fac0a1a90614fdb42bf88
SHA512

e1382a65f625850802021b24d960198a673cb3202fe8530b1d418124e112657b769b2fecc81daedb00c3c47c639f8e0747925dbc6ddd1dbdb3fd91acbcccb6e3
SSDEEP

3072:LgO6Yug4XJVCBxViyw2VWKUM0nAFgeDnEN7tP/r12XKAfZsUwfIhdvgSr9NVcyh6:Lgq0ydLytP/r1tAfZsudZ2yho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56de1d8df6ae45020384769b97bfb520N.exe

Files

56de1d8df6ae45020384769b97bfb520N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ