81907b6e6441100e560cba2fa7c889a410a3a0f2c8446ca7268007e27a658d33N[.]exe | Triage

Sharing

General

Target

81907b6e6441100e560cba2fa7c889a410a3a0f2c8446ca7268007e27a658d33N.exe
Size

1.5MB
MD5

6639dea9f1b7c4c5d86319f48527c210
SHA1

330785632a3bb07b9222c029c08239c3c3edede8
SHA256

81907b6e6441100e560cba2fa7c889a410a3a0f2c8446ca7268007e27a658d33
SHA512

8c535126de3a249905b13476fcbad19466be3fe76cf8dc42600d7626d5b248268bae10caac298bfd809b85e5b19be1f17920447b2b8f050785daafaab5262ca2
SSDEEP

24576:0NNUtQhWhtqDfDXQdy+N+gfQqRsgFlDRluQ70eJiVbWpR:EzhWhCXQFN+0IEuQgyiVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81907b6e6441100e560cba2fa7c889a410a3a0f2c8446ca7268007e27a658d33N.exe

Files

81907b6e6441100e560cba2fa7c889a410a3a0f2c8446ca7268007e27a658d33N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ