13C0E62872D5853A3DD11AC7DD046993[.]exe | Triage

Sharing

General

Target

13C0E62872D5853A3DD11AC7DD046993.exe
Size

19.8MB
MD5

13c0e62872d5853a3dd11ac7dd046993
SHA1

a67863c1bd8b79ce3ad7e38dbf0f1eca92a5b607
SHA256

cfed1055308a270f28b7a63c778d679d73124d5ece12a6223a5a595a95f14dc9
SHA512

236ba552b19ebcd762ff56c68a9ac91c90cafcadec2cf41910de7b9ca510a9098e398cbf272b57c4b47287664d1baa60e364868512d8f30b7e9f267fd5c800cc
SSDEEP

393216:+z0Yf1qLN6WphlO/jm+jEzjnW8NKoaO20ijGfVoOXogzw/Q3tarVvXO0oPR9TP:eaLN6GHObFkW8Pax0yGiOXofIOVSJ9TP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13C0E62872D5853A3DD11AC7DD046993.exe

Files

13C0E62872D5853A3DD11AC7DD046993.exe
.exe windows:5 windows x86

dfc137e2861dfb09e1a7251fabfe7796

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset

kernel32

lstrcatA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.|59
Size: - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.+pr
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MO%
Size: 19.2MB - Virtual size: 19.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ