757dbef95c1bd3cb89ebafe7aca6be41[.]exe | Triage

Sharing

General

Target

757dbef95c1bd3cb89ebafe7aca6be41.exe
Size

50KB
MD5

757dbef95c1bd3cb89ebafe7aca6be41
SHA1

21266a8b72794121bc168d6d3b8308a68a6ffb0c
SHA256

18442dc6e2ff8f4f8d2af4cf51744e0e27f5a94d11c9791b105de2c5a0193198
SHA512

66ec18628960e48e6febd9deb72a840d9de52f53f4d88c2516cb20c8830639aee1d5d2684acc59b2917f4d49181f02cb3f2490947bd6421f5dbc8936d42fe30d
SSDEEP

768:eApQr0GvdFJI34qGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENR7UuL0Q:eAapJlQsh7pWezEPJBtUs7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
757dbef95c1bd3cb89ebafe7aca6be41.exe

Files

757dbef95c1bd3cb89ebafe7aca6be41.exe
.exe windows:4 windows x86 arch:x86

7ecd8f76627cb5379a7c0b0c02b48c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
MoveFileW
GetSystemDirectoryW

shell32

ShellExecuteW

msvcrt

_wstat
_exit
exit
wcscmp
wcscat
fclose
memset
fread
fseek
_wfopen
fwrite
wcslen
wcscpy
wcsstr
__p__commode
wcsncpy
__p__fmode
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
_wcslwr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ