26c2048c3bec5b163209a068051dae40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c2048c3bec5b163209a068051dae40N.exe
Size

865KB
MD5

26c2048c3bec5b163209a068051dae40
SHA1

34abb87df429b151875575ecf457bc3852f2e589
SHA256

de4d7daee71649816c1c7eae396d8ee02f6bb2aa13b13e24c71620124cf30e04
SHA512

df59ebfd70957352d29eebad41c4498d0a0cfec339b3283c6d2a05aede3dabe569dab8c9624f2a986096fd5fe747ba7d4da49eaf8447cd2286933dfba636567f
SSDEEP

12288:sJ7YNVISYD7YNVISYi7YNVISYS7YNVISY9SYVqISYr:a8PWD8PWi8PWS8PW9xMWr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26c2048c3bec5b163209a068051dae40N.exe

Files

26c2048c3bec5b163209a068051dae40N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\AtmanNg\OneDrive\Visual Studio Project\WFCL\obj\Debug\WFCL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 707KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ