2df54136bd77d4c81ed704f0456ef680N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2df54136bd77d4c81ed704f0456ef680N.exe
Size

200KB
MD5

2df54136bd77d4c81ed704f0456ef680
SHA1

7ca91ccf5a77037f6c307a0d3d88e9843d7b3e73
SHA256

5b86018c869f5ba847a22111adcf8de1f9ba4840656734a24bf9472cafa348c0
SHA512

bf233ef1b0adf76d21d8cb72aad02843b23cebf37f35191715f268f60af9a570e10508667934e24911abe4b76b589bd7135df880820ff3d989e30fb621a02977
SSDEEP

3072:xaJwSEFjNCKGHX6fY1LhgfiBpD3xuJWBKBHgHo:sqRCpHX6fnsD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2df54136bd77d4c81ed704f0456ef680N.exe

Files

2df54136bd77d4c81ed704f0456ef680N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

M:\JUXQ\Documents\Visual Studio 2005\Projects\11_Server\11_Server\obj\Debug\11_Server.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ