cf9814da570b50987a6818e64a3210f0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf9814da570b50987a6818e64a3210f0N.exe
Size

727KB
MD5

cf9814da570b50987a6818e64a3210f0
SHA1

c4213799013ba75511d0b7512a4e833f4ea11239
SHA256

72fb40d5b4c0ccd74a1036e827906493237ab912453f04cc87106ff1483deb4a
SHA512

5813089970b9219c1792de7a75f13967bb550cf493a1888c3563c7cd26d6d495363cd05254ac983c9ed1a6212c84f33dcfeb719b972a99cd13d3be96d5df3939
SSDEEP

12288:LwECaUglPnFsk7P0UahDyDT1vBRXjIjpyxkdI6S7GJ:LwEC70qkgUahDupRbGJS7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9814da570b50987a6818e64a3210f0N.exe

Files

cf9814da570b50987a6818e64a3210f0N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ