61d5039a3a8a103daf0a9f42981ffa30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61d5039a3a8a103daf0a9f42981ffa30N.exe
Size

81KB
MD5

61d5039a3a8a103daf0a9f42981ffa30
SHA1

1311d60b01d552aa22d154a6b4921040c1a0da2c
SHA256

c5a2848b422fc9499854e35fca937e76f37aee9a3d29c124c17c0a9759c759b1
SHA512

5bca3230a0f8ba1df86683a01d27dc050ddd13c89fb645bf65d0235001a5b2eb7792184c5d393328c6a8d11a68f5ce988ff5e9ee71408f6fc2b5ee60cbef4a50
SSDEEP

1536:bDcWLfIbgEp10gyX/dtnTHNWnnn622222S:bDXL0n0gyX/d1re2222S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61d5039a3a8a103daf0a9f42981ffa30N.exe

Files

61d5039a3a8a103daf0a9f42981ffa30N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE