AP302[.]exe | Triage

Sharing

General

Target

AP302.exe
Size

516KB
MD5

1b703b71055f837e26503ba8bbe2fb10
SHA1

b2f71c0b3fec70f572a77322ed1c52dff368420c
SHA256

9a3def3143b489bb14dfd22954b33a6adee1d419f87b3519d2b52a6c46481c28
SHA512

9c48427807d3893addc315dc5cf6c34dc0adc65a52e5ca1567a4506727f7085845b17cfd54351cabccd52262fccd26314bca90a4a4fc46f91e107e059f3c2632
SSDEEP

6144:whAabum+zFfOpoDUrC3nNPUU2M7V9cEPbegfon:wh3aPzFfIoDr3Ut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AP302.exe

Files

AP302.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 502KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ