31dbdada604eaafdcf625cc7b2070c70N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31dbdada604eaafdcf625cc7b2070c70N.exe
Size

164KB
MD5

31dbdada604eaafdcf625cc7b2070c70
SHA1

3d0b20933ac24943b8209abbef90569145a8f176
SHA256

d6fcbf6f2df93b524f969beb8524359d0e5c565941aa9f1254e8c3090dbac55d
SHA512

bc3faab92b8cbb8f04f168e825b6eac898abde8c0f55532035dd33fc11a4b5d0ea79d496ba83298638cc45d6c91d4bbf612b3f5c902f5f14c2bebbddf4dda34e
SSDEEP

3072:YQ80DMvi9ZXmQXD+fJ6XSJMT+mzMfU4Fm1MyWmriIWDhAHhSez:YQ8gZ5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31dbdada604eaafdcf625cc7b2070c70N.exe

Files

31dbdada604eaafdcf625cc7b2070c70N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\9f43385f\35dfbd2e\App_Web_rtcfg6fw.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ