c690c4ab493a3adb7a0ed548f58224f0_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c690c4ab493a3adb7a0ed548f58224f0_exe32.exe
Size

66KB
MD5

c690c4ab493a3adb7a0ed548f58224f0
SHA1

2d58801e1713f3a2298bc23faaedea89ac58decf
SHA256

0d789dab1ed3c6c5cc659817f453cfad6e10784e73ed614ecb66012174e5d16c
SHA512

3ae7f237f259b3dc997e6d5fad59ea77cec863e1cd880af19f67abfaf378fedc5b12d1d184f2a7c4464b42d72855f1345e7d7c082d70951d84f314774500d759
SSDEEP

1536:dMUjR/AClPLGvUrn+GAgVXffnoTwxZL2K+uwprPGrsCx+:yiRI2CvfGAQXHnoT22wSPe/E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c690c4ab493a3adb7a0ed548f58224f0_exe32.exe

Files

c690c4ab493a3adb7a0ed548f58224f0_exe32.exe
.exe windows:4 windows x86

71faf552256dca7d3475d08aa0cf6b87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalLock
PackageNameAndPublisherIdFromFamilyName
IsDBCSLeadByte
UpdateProcThreadAttribute
BaseCheckAppcompatCacheWorker
SetLastError
OpenProcess
Module32First
GlobalGetAtomNameA
GlobalDeleteAtom

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE