ef279fd945f53fb1ed088983e0081c40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef279fd945f53fb1ed088983e0081c40N.exe
Size

12KB
MD5

ef279fd945f53fb1ed088983e0081c40
SHA1

17fac29411bbe65d5e9df5b20fe8e47418fe7344
SHA256

021a151a3d8193e0902ccd3ec4fd310a71f50662f842658dcec7210d80f0cb8d
SHA512

79682f20d940f3739df840ef2211fa80ba151502917580e61875c1a11177f0ac9253afc4466cf408eda282cc4c729872accab58e5925d36d3661a428e67dc018
SSDEEP

192:ATcnQLxTTqaJ/MTWKui8mSX/vcyFEqFfzF/GPkVF:urTTxJUTWdi8tX/vxFf5okV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef279fd945f53fb1ed088983e0081c40N.exe

Files

ef279fd945f53fb1ed088983e0081c40N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

App_Web_in_incdetails.aspx.f9d3913e.ju_4fdu_.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ