62e6857fa4c783eed04a6b51f393ab50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62e6857fa4c783eed04a6b51f393ab50N.exe
Size

1.8MB
MD5

62e6857fa4c783eed04a6b51f393ab50
SHA1

c049ace35da57d6f39e632cbb17800973955d619
SHA256

16a5eac4ab8232bd027a8a94dd48bdd53721ff294590c82d958bf9f871749592
SHA512

101c982bc41f5219dae2c41e00168fabb6a6ec403a995b1a73eecc122cd995d8182ae844ae964f55fddc9e85b6f5698445f9b71d74eb4519a8a7dd28fda5eb0f
SSDEEP

49152:61Ic8MNFyrbtL2tLgoJdXN0BMOwLloBrugY:AIcqV2V/JdXN0B7+sG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62e6857fa4c783eed04a6b51f393ab50N.exe

Files

62e6857fa4c783eed04a6b51f393ab50N.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ