3b75c5aa9fb6e4827a34e72254c7d7ead6b41df7a079dad06234fd3e76f1cf95[.]exe | Triage

Sharing

General

Target

3b75c5aa9fb6e4827a34e72254c7d7ead6b41df7a079dad06234fd3e76f1cf95.exe
Size

8.5MB
MD5

5e740d5e64d7a6a7a639c58b17888b9d
SHA1

c47715178314dfb1be86d645caed79c912f1a8de
SHA256

3b75c5aa9fb6e4827a34e72254c7d7ead6b41df7a079dad06234fd3e76f1cf95
SHA512

aeefdaf11e5ab759b36580ec78204a2768c4192c64d5261e5f767bc527ab893ea565a4833ba5e3014946c32a4ecd17ac6ce630d085dee254b8e2786d493d6a11
SSDEEP

24576:9z/3E7Tqsy5fP/NxzsWgprCmI3fXPeXxIqppjWttynCGaD2b4vNV5OzQvWpMQjEp:/sbE3Bx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b75c5aa9fb6e4827a34e72254c7d7ead6b41df7a079dad06234fd3e76f1cf95.exe

Files

3b75c5aa9fb6e4827a34e72254c7d7ead6b41df7a079dad06234fd3e76f1cf95.exe
.dll windows:4 windows x64 arch:x64

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

V_FixDoubleSlashes
V_FixSlashes
V_IsAbsolutePath
V_RemoveDotSlashes
V_StripLastDir
V_StripTrailingSlash
V_UTF16ToUTF8
V_UTF8ToUTF16
V_snprintf
V_strncat
V_strncat_length
V_strncpy
V_vsnwprintf

Sections

.text
Size: 8.5MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 483B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ