AP401[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AP401.exe
Size

628KB
MD5

a31baaa117c3f24b2f8a28fa6d31bad4
SHA1

05eea940b08bc42353b132d631ebc14386a04c7d
SHA256

7403f3108a0762a3f313ceb6af413605f31d4f9e3314a2802ec1e690092de7fc
SHA512

f8ed17b8b8f3cd42ae15063c920c06d147de454d916131c7a972d5bfb394bda4a0e774eb3d41ac73de93cf311bf579219cc845aef2b7a43d76a3ab1f31499d20
SSDEEP

6144:1/Jh79eE/IHNQNUi6R0IUpL0ZQc/KvWj9DzDaYQHaN2EfUTm2E/eJmo2MjP89fSk:11eiUaUiUURSMWs1EfUdm0g8DkJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AP401.exe

Files

AP401.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ