1708648250[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1708648250.exe
Size

7.5MB
MD5

e4997c45202e4db87d010d551bca7708
SHA1

98afff2da234284e4cde5806f43031ca9285a329
SHA256

d2e0913e16c5c0c39901c16e1090d97afb7cf6a973ee130fab1f758703c91f3b
SHA512

c6801fbc57e7152d4e606adaf036b7da5e78b744d39595515a3fff233a752aaa972c53f8242e6e61fac328f1e7984f947d151bedf8548abf10ce4ec727688754
SSDEEP

98304:CWumlH6XBJOvJQODguF3DnRHVZK7PjfzFTG1QdpWR9YYTJymVKy+MQGZIi7ipeig:CN+oGZDRFjPZeTlGlyJFQecRM7HNhG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1708648250.exe

Files

1708648250.exe
.exe windows:4 windows x86 arch:x86

83c0598b656623329becf1042c289acf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CreateWindowExA

advapi32

RegisterEventSourceA

mscoree

_CorExeMain

shell32

ShellAboutW

comctl32

DrawStatusTextW

Sections

DATA
Size: - Virtual size: 11.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE