131ed27ebd20c2f4b49d95e73c1bff80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

131ed27ebd20c2f4b49d95e73c1bff80.exe
Size

119KB
MD5

131ed27ebd20c2f4b49d95e73c1bff80
SHA1

1d08bbd166a64752fe67a2940f9500f02de35646
SHA256

aac1aa9aaaf9bf206cade374e7f57cbd60f10283ee7c4e0b12a426a2caf41b3b
SHA512

125c62639333ea35ac4d5b8a4a9a2f1a34edb092c98d42c7df3bd419bf5cf4369b3a8533a43dbef7d4b8b496d153ddffac091bf1d6584fb417f0cc0040790ebe
SSDEEP

3072:McODamtxaFtkq6pL63MhuGrMQrgG9k/ebEplvsjnKzP6de8MLfS:ADfxwL+LDhH9k/n3szKzP4n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
131ed27ebd20c2f4b49d95e73c1bff80.exe

Files

131ed27ebd20c2f4b49d95e73c1bff80.exe
.exe windows:4 windows x86 arch:x86

c8fc54a1c1938ebfe2585395e3c8aab3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveVectoredExceptionHandler
TransactNamedPipe
DeleteAtom
PssWalkMarkerSeekToBeginning
ShowConsoleCursor
WerRegisterRuntimeExceptionModuleWorker
CallbackMayRunLong
GetNumaProcessorNodeEx
CeipIsOptedIn

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE