d99831e1c67b6251f5fd86393a70cc3a731e5ffda4f7bf926f256c581f73fb38[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d99831e1c67b6251f5fd86393a70cc3a731e5ffda4f7bf926f256c581f73fb38.exe
Size

13KB
MD5

b8ec0f6a0acff26a2500532cb210130f
SHA1

426c4decf0b1b7b2c7e0d96e73e64c1b8e8a4919
SHA256

d99831e1c67b6251f5fd86393a70cc3a731e5ffda4f7bf926f256c581f73fb38
SHA512

90d84fdff49d9196adbe9ceaee1220c462292832850c8539911d27f054c05d37a0aa9f3b8cbb1ce787e09457a29782a56d7d9aadc9d85cbe8a33fe29e2017299
SSDEEP

192:Ftrv5nCriUqXu72FNhOu3kyCd4JZ4IuJCDleV9K:TrvZieXuuUyCd4rXbDIV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d99831e1c67b6251f5fd86393a70cc3a731e5ffda4f7bf926f256c581f73fb38.exe

Files

d99831e1c67b6251f5fd86393a70cc3a731e5ffda4f7bf926f256c581f73fb38.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Ar48\source\repos\ConsoleApp1\obj\Release\ConsoleApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ