04b3d2363abf2b52645bf3ff721920db9ee45fab9333f7ac355d3d4ddbdb811c[.]exe | Triage

Sharing

General

Target

04b3d2363abf2b52645bf3ff721920db9ee45fab9333f7ac355d3d4ddbdb811c.exe
Size

1.5MB
MD5

22436f4ee55db2b4a040df3525553d95
SHA1

dc0f625299ad5e1d4aea14d256056b538ca6ee48
SHA256

04b3d2363abf2b52645bf3ff721920db9ee45fab9333f7ac355d3d4ddbdb811c
SHA512

2072d06603fdc7320ae60b67383842a263b319cdbb4ba5dc6e031f3ed3aa9e7d02c50df3321f3c04025e6a9676fb6b3411a1b95fe3b82b83c2a3905ff82d3720
SSDEEP

24576:UNNUtQhWhtqDfDXQdy+N+gfQqRsgFlDRluQ70eJiVbWpRg:kzhWhCXQFN+0IEuQgyiVK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b3d2363abf2b52645bf3ff721920db9ee45fab9333f7ac355d3d4ddbdb811c.exe

Files

04b3d2363abf2b52645bf3ff721920db9ee45fab9333f7ac355d3d4ddbdb811c.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ