1dd30d7863a6687e4810a4f8da7e6aae7c12c6633df0517872682fbdfb951d7c[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dd30d7863a6687e4810a4f8da7e6aae7c12c6633df0517872682fbdfb951d7c.exe
Size

388KB
MD5

eed18b5e8e965f41241e3bbd9364c101
SHA1

ab91d2db2b030049c8df0a17f60930ccff2e1ea4
SHA256

1dd30d7863a6687e4810a4f8da7e6aae7c12c6633df0517872682fbdfb951d7c
SHA512

2a6e429e2f3c218a330912483f91f67c4c6641644129c8a7a19e3f14f6d988854c2df1833af04dd95bd784fa1b0f217255e1abdc54d57bc2fedd136c0fef0b81
SSDEEP

12288:Fjy9qoZEQc2vKIkOMKTpQMCpkTNk9S4wYU7JKS3Jpx:Fjy9DBaI2mvIkT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dd30d7863a6687e4810a4f8da7e6aae7c12c6633df0517872682fbdfb951d7c.exe

Files

1dd30d7863a6687e4810a4f8da7e6aae7c12c6633df0517872682fbdfb951d7c.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

g\L=Y
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ