ce18f6810aa6baa1136bb395b6609094bf8a9bbae12d41ee593a90cc5d7b48bd[.]exe | Triage

Sharing

General

Target

ce18f6810aa6baa1136bb395b6609094bf8a9bbae12d41ee593a90cc5d7b48bd.exe
Size

127KB
MD5

851e013c473c1b5ee3ee45ce38891103
SHA1

96537656c88d5dba4ddea3497121c604747c01cb
SHA256

ce18f6810aa6baa1136bb395b6609094bf8a9bbae12d41ee593a90cc5d7b48bd
SHA512

947d0f1b4aac6608c7f5cf030b91b810dd80c2c08b6d5e0552de3a2b61ea614b490ee80609646aaef12826339dc2d494446accce4f2edf5e6b85b5a1810860e6
SSDEEP

3072:0fQK3QLdbSNO4wmR34hP8naoAk3/zWMi0GTGs:0f4L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce18f6810aa6baa1136bb395b6609094bf8a9bbae12d41ee593a90cc5d7b48bd.exe

Files

ce18f6810aa6baa1136bb395b6609094bf8a9bbae12d41ee593a90cc5d7b48bd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\home-tech\documents\visual studio 2013\Projects\omar\omar\obj\Debug\omar.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ