35a9406d1bc1141db6ae5305e0b22a20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35a9406d1bc1141db6ae5305e0b22a20N.exe
Size

20KB
MD5

35a9406d1bc1141db6ae5305e0b22a20
SHA1

f4d27e1cfa7200f70decefa47e749964e4ea8928
SHA256

a193cd8d8b855d2088aace1b34f62ca59bda3667774cc02648844b6973a9abd1
SHA512

017d8aa87759f347d51920476ab569ceddbfab8d285dc959d8f35dfcd2446bebbfd87d7ae108ce39344876f774271bec08633601af8ed1864c678c31d34196e5
SSDEEP

384:gBlSXVaDrwcp94FcY9GneoqbPTWqjxE3Lf45xQwlC/CsYBW4ZFxYc:qqMeo+PjGbK9pYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a9406d1bc1141db6ae5305e0b22a20N.exe

Files

35a9406d1bc1141db6ae5305e0b22a20N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\nvtray\nvtray\obj\Release\nvtray.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ