a0fd2b7b54a7200efeb9b1f690aa9df0_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0fd2b7b54a7200efeb9b1f690aa9df0_exe32.exe
Size

66KB
MD5

a0fd2b7b54a7200efeb9b1f690aa9df0
SHA1

3e724bb88c7c989dd2fc0e46399c2cd9d09b6ddd
SHA256

21db9c55b906e6afbea405f3470acad99c62fa5e853c933ce6bc40b5dc6c8059
SHA512

998091185e5c4a4e35515b6391a17bb1ac075032ede2326202ffee8bed601ea9e089cb258eef630059bebdf6dab41dad2e73671416972ec830b6bc9343e321fe
SSDEEP

1536:P3ftRylhBltKhRZW/SRi37WWBq2sf9rYmc+UA0/ogN4gI:PFRylhBltKhRZWhLk/9EX+B0/oujI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0fd2b7b54a7200efeb9b1f690aa9df0_exe32.exe

Files

a0fd2b7b54a7200efeb9b1f690aa9df0_exe32.exe
.exe windows:4 windows x86

e2b13c15b760d103a181798697398e24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVDMCurrentDirectories
Thread32Next
VerSetConditionMask
ReplacePartitionUnit
CancelIoEx
QueryFullProcessImageNameA
GetCurrentPackagePath
ReclaimVirtualMemory
GetConsoleDisplayMode
SetEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE