0db3b597dca12873c963472aab5f4f9b[.]exe | Triage

Sharing

General

Target

0db3b597dca12873c963472aab5f4f9b.exe
Size

365KB
MD5

0db3b597dca12873c963472aab5f4f9b
SHA1

6497aefcb525a527450cc002e214a4ed9bb262ae
SHA256

5a4984aee6e9ffc00e96382d870c77651b5dad31c3d05045ed2388db26142062
SHA512

37e6354470f13a5f8c6d34be8ebbf1694dc9a150e55b229feb5136babba720223cd3e3de562ec888110fe4451b698009c4a6706721b4ac6b81820164a58a8b89
SSDEEP

6144:7lPzjyLB8QC6H/wVHJlQYvaGfeHZe6Vgyk9DbkywrWTdwvAraJi3Z95U2a24w+4j:ZA46fwVHQVGmHZ3k9Uy7KoGEz57eiSH6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0db3b597dca12873c963472aab5f4f9b.exe

Files

0db3b597dca12873c963472aab5f4f9b.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\rje\tg\drwkoh\obj\Release\Fcs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ