f57fc5d78bdfecexeexeexeex[.]exe | Triage

Sharing

General

Target

f57fc5d78bdfecexeexeexeex.exe
Size

2.1MB
MD5

f57fc5d78bdfec47b1c1dbb2f40fd0f3
SHA1

01991a8109235758341d947c985365b30bd4d970
SHA256

647bd6c895d96b71439ad2530ae149900390f2b60feefbdeae2e1df8f17afae4
SHA512

0864e7a631868648f9151f169eb5a164c8c2f26a2ddfba5e11a39f7f2ceac1d8c7c171d19cb7f8bc33addcf70d86aeb7c2aab83c56012a8691ce7e76172eca8b
SSDEEP

24576:TFhOpTH0SmBBs7SuRxUf3JH5/bps3wRx68k124TrjBVoRFX2EjaBsHAA/ZFmDC5I:hETUScGSn/brxl4wfz70lEudnP1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f57fc5d78bdfecexeexeexeex.exe

Files

f57fc5d78bdfecexeexeexeex.exe
.exe windows x86

9826485e082cf9e7b16d560b37e50a7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentProcess

user32

GetDialogBaseUnits
GetCapture

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE