34db2593ff4d36c82bad82ce52474b5f[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34db2593ff4d36c82bad82ce52474b5f.exe
Size

72KB
MD5

34db2593ff4d36c82bad82ce52474b5f
SHA1

b77e8eb9dabb412462bf1d14aceb755cb604d7c6
SHA256

f6be720b2ce75e03414fdae3e9725cd11479f889d8471e95e84267fcc926773c
SHA512

d194a559361a65de1c113a08312e9f7aa120da36e274be25d537ce1dc047f38eacfee4ed2b58cdf396d0d6842e616c2f9c698e696418ea67c41719c0efd94ab0
SSDEEP

1536:QpwU4e+UxUxrt/1IHChrxMbkkIpYWRnNiZewaBr:Qpoe+UgJxMQkIpYWpwaV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34db2593ff4d36c82bad82ce52474b5f.exe

Files

34db2593ff4d36c82bad82ce52474b5f.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Macbook\AppData\Local\Temp\befboncc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ