b74d0d21a66aff812a1688b90fabe210N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b74d0d21a66aff812a1688b90fabe210N.exe
Size

4.8MB
MD5

b74d0d21a66aff812a1688b90fabe210
SHA1

2b3c56578eb967345d884423159ad6eac1c83438
SHA256

3ff872e1c9022be6b45e4d294f43495e4b16d353990aaaa0b2b2cf1110258a0e
SHA512

da3bb5e6fabdd544786db0497f385f6de63ad140e665d60d7b84c41c74834c030306c38b4e51e4f4e63b00209668916e132c74db9333c80b2f7260dcb292be8a
SSDEEP

49152:tlnf80KhixGT583Ju+WhMm0cgoomYsM+PzGH54nBLy2UJfC/fcor9c5Wzftj2N0A:vn9nm0nGVzfXr9c5ylnauy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b74d0d21a66aff812a1688b90fabe210N.exe

Files

b74d0d21a66aff812a1688b90fabe210N.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ