91e00348a5b506db6f271acd3b065e80_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91e00348a5b506db6f271acd3b065e80_exe32.exe
Size

58KB
MD5

91e00348a5b506db6f271acd3b065e80
SHA1

24e6b3c3574e66ae7bf04750c026c2c2056960e9
SHA256

171b5cf8df02b2f4e262f56db20abee582ceba6b838a2eeb1dbc095d8ad3c6c8
SHA512

cde0b821dafb98af80ef39bbf0fd9476457de088ee30cc444d2c6b0231c769d602cee9789442f4340d4716e214d362ed54f89eb86057e54402df69673f77a499
SSDEEP

1536:LNNlq4DIvUITzGxBExGOpgtxTsipOCixthpPdqZ8E:dq4DQnsqlg/TsFCiDhpVqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91e00348a5b506db6f271acd3b065e80_exe32.exe

Files

91e00348a5b506db6f271acd3b065e80_exe32.exe
.exe windows:4 windows x86

7a42482e1919570f2834af58ebccc2db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
SetConsoleTitleW
ContinueDebugEvent
WriteProfileSectionW
BeginUpdateResourceW
FindFirstVolumeW
PeekNamedPipe
UTUnRegister
SetupComm
GetConsoleCP
FatalAppExitA
SetThreadPriorityBoost

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE