af35901efb9ee36600351e6ce7145a80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af35901efb9ee36600351e6ce7145a80N.exe
Size

12KB
MD5

af35901efb9ee36600351e6ce7145a80
SHA1

fcf2687fb414738a05774abe7053e7add209bcd4
SHA256

0ceac117e84efbb3c5f3dda360e75df4f30f4d7745bde5100e7147e3e98455a6
SHA512

3737c4e96dfee72d5a8440b532da1911c5879355bbcdd280afecb55e19871485464b609f202ab2b3e47ef2c3aafec23eb0e293f6c8e101b41830ec84ac7ada5e
SSDEEP

384:exVUV7baaPTD/zwenFPLPjG5w8ojiQ3xQbNYvstoEej09kMJHI2YHI0dWr2O:cqV7WoD/kenFPLCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af35901efb9ee36600351e6ce7145a80N.exe

Files

af35901efb9ee36600351e6ce7145a80N.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

App_Web_yheus1bv.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ