ApxFamilyHomeLowes[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ApxFamilyHomeLowes.exe
Size

227KB
MD5

4700619389627c2458a205dcf802ee1b
SHA1

4463f6843ee36765bed38f9b01db1d7020b62911
SHA256

59c1f547f771d003cf7108d88719be0c6b9bc179c888e4a362484240f3040668
SHA512

3e7b9eae8fe5aeac57782377e43f95c1ec172ef42760663a27202bea5ecc377dc87dc57e7c94cbbe7798c4fd76ae0a92f8705dee7fc2e0116faa0cb68dde1af0
SSDEEP

3072:f6ASg7dvC4Bi3A2YJDJZQ4uYHxAGNBzprz98ZGknmv/N7gNkL0qYJ5BWUFtZHcQl:2gxvC4M3A9zRR9Z9Om3N800quTeQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ApxFamilyHomeLowes.exe

Files

ApxFamilyHomeLowes.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ