3a1d523d8b425e5e0f5b84e5740e4b40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a1d523d8b425e5e0f5b84e5740e4b40N.exe
Size

10KB
MD5

3a1d523d8b425e5e0f5b84e5740e4b40
SHA1

45591df841a71e4714ba630755f48a03547a99f5
SHA256

711e82861ef2727e72205f72670eaab8417daee1b9451cc74bdd14343528c46b
SHA512

68ceaf54266074100e0e0d0c664bd92c24a00e6d56421c2117e85663add0a5bcd4ab47888a4ae0bbf622477cf165126a3c1bcc38fcc50cdf0e365ee1c75a2197
SSDEEP

192:Pd8MBg9dnVzI8tVrHtNBrVZxcIMrrrTy6z:Pdx63nR3VbhrVMjy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1d523d8b425e5e0f5b84e5740e4b40N.exe

Files

3a1d523d8b425e5e0f5b84e5740e4b40N.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

\\192.168.45.243\visualstudio\ConsoleApp1\ConsoleApp1\obj\x64\Release\UpdateSecure.pdb

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ