1feba0f8c1843ecb707e4d4d0c025510N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1feba0f8c1843ecb707e4d4d0c025510N.exe
Size

9KB
MD5

1feba0f8c1843ecb707e4d4d0c025510
SHA1

d34c1eebc0f52684a69f4d282e2b4200d3dd0d14
SHA256

dab3a50df825de969ab49696adcf5aea11bf84fd9e854c6a4378307670ddc4cc
SHA512

f3a55f6afa59369bd453e83ae0ed88adc33b5341a35b86114f968f1b77f87f1f3921c215a97f6eb117021da92bc0b2c29b1c46ee3565845f88cab04202f0995d
SSDEEP

192:qFlDlKCTBo5umKmDBNnbxyboZFlC3Jlu7:qFlJTTBo0mfDrx/FloA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1feba0f8c1843ecb707e4d4d0c025510N.exe

Files

1feba0f8c1843ecb707e4d4d0c025510N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Source\C_Sharp\Secret_DLL\Secret_DLL\obj\Debug\Secret_DLL.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ