f691361ec2c8962051545e5ae02ef060_exe32[.]exe | Triage

Sharing

General

Target

f691361ec2c8962051545e5ae02ef060_exe32.exe
Size

66KB
MD5

f691361ec2c8962051545e5ae02ef060
SHA1

bd45ab3a817e89c8ea217bef0a5a0fdb87414eec
SHA256

867bdfe1697242e8c6cd241a958ead40eeff0bb91d9f2d983af98be6d06241f8
SHA512

8c4dde435aea5dcc454b419818cb1f445067dc51adcc03656c35aa12ab8216552d6456f4521979d7d860d356564db8c9c4a14f57f947f05d881a3ab1dbbeed50
SSDEEP

1536:vaa6qm23wvHhMPVVRnV/j8n58hscRHsmME/IEs8s1p2CcCElsQK:73wvBWzRn9A3cRHsmMDp2CYldK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f691361ec2c8962051545e5ae02ef060_exe32.exe

Files

f691361ec2c8962051545e5ae02ef060_exe32.exe
.exe windows:4 windows x86

f98361826e145818df74cb2da340b58c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
BuildCommDCBA
WerpGetDebugger
BaseInitAppcompatCacheSupport
InitializeProcThreadAttributeList
RegCreateKeyExA
GetWindowsDirectoryA
GetThreadInformation
NlsCheckPolicy
BasepFreeAppCompatData

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE