AP03[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AP03.exe
Size

3.5MB
MD5

54b2213bd2133f6fc94b6b9ba8ddb6c7
SHA1

042917dc0fab119e9ca46c1fc92123c98262d7d5
SHA256

e2816c317d6110de763ad1d7c406b925bde37842f952048a6879d24d583f20a2
SHA512

e760dddf1e791cddd0c92f586011e7f247537de574cae97c6f9a3d60996a79218e5e207d3fac56760f074510f05dc488b6f5e77baa44b03d683902d82eb03a9a
SSDEEP

49152:iY4Hwu8fAny4xmy0RvsQmAqdoh/NNe43oM97Ptx1qk:X4Hwu8fAnbxmy0RvOdo9NNe43dl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AP03.exe

Files

AP03.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ