2cd872f97767b7c125f2a3acd84aa6ad7c7be33a1c0a5b8df0b53b658b9d625aN[.]exe | Triage

Sharing

General

Target

2cd872f97767b7c125f2a3acd84aa6ad7c7be33a1c0a5b8df0b53b658b9d625aN.exe
Size

467KB
MD5

abd2bd452e92fffc8cb37dcc96bed350
SHA1

79542641afb02cf5cc4f3675a5e77848198cab4c
SHA256

2cd872f97767b7c125f2a3acd84aa6ad7c7be33a1c0a5b8df0b53b658b9d625a
SHA512

10463e99ea5ff5ee9a49697b1c829bb2fe641f6ba2a7c48b21f18cb6ab7221713e9536f1a98430c73a96e8fb7b1275177a3e2df733a3b85366f2176367d820b2
SSDEEP

6144:4+rxvPoiHw7sQ65lZvygWnMF6kOr6ZOhm1wdZkRmxVEjPLox2xqBBgGLbSU:Prx3IsQelZvAnbRr6ZGm1wdZkIxYWj/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd872f97767b7c125f2a3acd84aa6ad7c7be33a1c0a5b8df0b53b658b9d625aN.exe

Files

2cd872f97767b7c125f2a3acd84aa6ad7c7be33a1c0a5b8df0b53b658b9d625aN.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\p4\emmcdl\main\latest\Release\emmcdl.pdb

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE