4aa8849b9e12e96d43897fab7ba7e560N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aa8849b9e12e96d43897fab7ba7e560N.exe
Size

237KB
MD5

4aa8849b9e12e96d43897fab7ba7e560
SHA1

4d4300d7b60b00181fa668f3251374a61c8a80aa
SHA256

037ef582cefdaafb56d5cdae72de2912ae149d031c12e9e4f2ca01739aaf4e97
SHA512

6961cf1917de92d896dc38419d97b38bed071dcec273387570a468479acb3580820869b381e38e9190e2e8bc0b32be96c126d18269e827a5961096c6d4664bf0
SSDEEP

6144:Qm4eQFQ4NqaUSquLQxYHMDg/QdocWUm7Qsk70X2yQYDTLByRaq7c1x0:A3aL6mc8ocWUTskOqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aa8849b9e12e96d43897fab7ba7e560N.exe

Files

4aa8849b9e12e96d43897fab7ba7e560N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\DarkForcesRenderer2\Library\Bee\artifacts\1900b0aP.dag\UnityEngine.UI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ