adfa4170e884581008240b6b5aa9f0f2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adfa4170e884581008240b6b5aa9f0f2.exe
Size

81KB
MD5

adfa4170e884581008240b6b5aa9f0f2
SHA1

c6d3d0dcc2bb7a3f7ee9b259dd5ea88ada3996fb
SHA256

692acdd1260c5ae8f348c53834be0a23b94bac00c45fb0926613ff4eb669f90f
SHA512

843653f97a4b3503180d115b0d5ed952d85dbc3dd9a00d28d45f43182768c0c156153a9650860088d8b90e3705f542bd6288a0c99c7bd2352f0117dcbbbe3bf7
SSDEEP

1536:FTPrLTd91bEXnU8riVMKvsqIVGXD7Zh7iFjbUm:FTPr3d91bB82VnkxGD7f7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adfa4170e884581008240b6b5aa9f0f2.exe

Files

adfa4170e884581008240b6b5aa9f0f2.exe
.exe windows x86

c2e4487f461edff82f81a902e3e4f0b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
memset
strlen
malloc
strtok_s
atexit
memcmp

kernel32

lstrcatA
lstrlenA
GetCurrentProcessId

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ