1a53ebc66b1f8df937bca814c39f0380N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a53ebc66b1f8df937bca814c39f0380N.exe
Size

4.2MB
MD5

1a53ebc66b1f8df937bca814c39f0380
SHA1

7d13049d8f878b53e135b5d8e4613e2d7751070f
SHA256

d966014ecb8a313cb473384db4a327095d92067f372420a1c474ff35182b52e4
SHA512

6b84af2342fc6191e694783255970e5a365f30e5d96e46be5b0aa82e5328d7d99dfaa8f551192b1d5e2e2ed55d0849b6fdf46812f490132d0c9b1c699145a493
SSDEEP

98304:Cmhd1UryeDOBGBl4oVLUjH5oxFbxhVLUjH5oxFbx:CljOwBWoVUjZEdhVUjZEd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a53ebc66b1f8df937bca814c39f0380N.exe

Files

1a53ebc66b1f8df937bca814c39f0380N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l2
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ