usb_txt_base32[.]exe | Triage

Sharing

General

Target

usb_txt_base32.exe
Size

9KB
MD5

f177ed1822bbdda18fcd143b6fd60b0f
SHA1

42d234cc44c71d18c80e7b66370c1256d313c6fb
SHA256

6334b111f4d93ebb11b9481f71a4a0122021bd0772f9cef0b11b8ed37dbfde2d
SHA512

c341dbe16dc6a4e00b5d84bc67ad4486b31bb8e0969cd9b491a9c8f02b54c0112bed14d33d0a3e86c08f0ef68fd69e8a9e4eaf2730aa0f4149dffd6dc6e11dd9
SSDEEP

192:75Mv+Z1iXCumVhTbuWJz2qjOXGGQjJot:7i6M8dLJiqjNvat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
usb_txt_base32.exe

Files

usb_txt_base32.exe
.dll windows:6 windows x86

0c04eab4e3b14b364e7e30471a1f4d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

user32

MessageBoxA

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initterm
_cexit
_configure_narrow_argv
_initterm_e
_execute_onexit_table
_seh_filter_dll
_initialize_narrow_environment

Exports

Exports

_DllMain@12
_MessageBoxThread@4

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ