0e9db5be29c77030634ec1fcb2961daf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e9db5be29c77030634ec1fcb2961daf.exe
Size

484KB
MD5

0e9db5be29c77030634ec1fcb2961daf
SHA1

c8dec3e133f701c72862fedc8cab2b47d4b7ef80
SHA256

5cabade89d26adb3c0215005a9be6d4bda4ac81f8ed1e57970021932d14766c7
SHA512

fc9cc97316b644c4ba7853905202c28b0212d59d8da99b8a2d3ee5c0ef81c8d57a0bb2816543a813097510623beb55cf323b10c0f54434ba0f173dd3b900cad2
SSDEEP

6144:FUhup/Bn8wQg0rNdJE1rdJXCkbzLLlBBuGIhvT1ooIqPl1Yu/hR6TpP+mDupIX45:FJiwQg2dK1rfr9bu7bDzhcx+mDX4DrJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e9db5be29c77030634ec1fcb2961daf.exe

Files

0e9db5be29c77030634ec1fcb2961daf.exe
.exe windows:4 windows x86 arch:x86

e7cc01e32c9c6d69608f5e50f53f244a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwQueryDefaultUILanguage

kernel32

GetCurrentProcessId
SetEnvironmentVariableW
GetUserDefaultUILanguage
WriteProfileStringA

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE