n71201flfssyimpw[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

n71201flfssyimpw.exe
Size

379KB
MD5

b7b11db117bdabfaee8ddf1ee73e5dba
SHA1

d5f5db8ee8fe1761fa70ab28b1c4b8db1b031a0d
SHA256

0fa0f2190b3b2f11a91216b9e961c585b54f66e8b71165dd0a406eee7a83d847
SHA512

9a59f96c94071e43c88cc4d6b15ee379753a3b3c06c818b5a9acfd33167bd600907f75e06ddde82884de7246e8e08bf479737f13d55932426597c3f3dc5399f0
SSDEEP

6144:jlHHRaY27NROl4k4SnFu+T2Sbo7iK29HnidckBbr3Vy+0:ZRaY27WlzTFY2tmckq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
n71201flfssyimpw.exe

Files

n71201flfssyimpw.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ