FVR-N2411-07396[.]exe | Triage

Sharing

General

Target

FVR-N2411-07396.exe
Size

587KB
MD5

2f402635e17b4f0d9c0d6922d384936a
SHA1

2753a159f2cf160733b1ceeede1db57d2dde0375
SHA256

bfd4e29505627b76243c4ea34c07b22af7edc00391b112e78c2dc3cf7a48d742
SHA512

96ec3a719566a081b060ed3812f5411e637b7f3ea5e3306effbe44d8284016e153182109b4f3c035aa31e8cc350c472fcfb59f5579006b14e0797040b2aa5a44
SSDEEP

12288:ho1zGksv+SGjpA3yKUUo6acZi1bRKrweUbLtBHCMcqH6U6PWuv04MadSEpl:C1zGUxjD1bRK3VMcqH6UqMUHpl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
FVR-N2411-07396.exe

Files

FVR-N2411-07396.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

yRKC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 584KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ