6b638f5e2b5cf2637c5af9c35d337f40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b638f5e2b5cf2637c5af9c35d337f40N.exe
Size

6KB
MD5

6b638f5e2b5cf2637c5af9c35d337f40
SHA1

ef8a481449fa57bb6a57bb54cc4939b3af353203
SHA256

d5267db59d04a1212efd1e77975465e821a57153afc7f2a083e00ffa183c1484
SHA512

3248ac936d499e03666341190c548367e71d3a9e4fce7c5165f6188140b656b50c659ecd74e99ff0695c489b5c05992b685f65fc96e4c563da05ce0457d68e5a
SSDEEP

96:ZH+lj9YDhx/cHyTqc8AUbCC+Arz88tWh7OBOJobzw9YiSjKX:ZHQYb/ZuF2A88tiwkKmX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b638f5e2b5cf2637c5af9c35d337f40N.exe

Files

6b638f5e2b5cf2637c5af9c35d337f40N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Temp\xuwkc8lf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ