31208347817bae55ef89ec489aa2285d5f359536b9386b946bf15c05f2e31e68[.]exe | Triage

Sharing

General

Target

31208347817bae55ef89ec489aa2285d5f359536b9386b946bf15c05f2e31e68.exe
Size

8KB
MD5

6ea33e3dd48805b21692e7f21e3f2c40
SHA1

c7966b33bbf1048cb70e680becd0364c8c0ab33b
SHA256

31208347817bae55ef89ec489aa2285d5f359536b9386b946bf15c05f2e31e68
SHA512

a11e4194289d1c29f41b4f92a358d288620e13fa73de4dd064744598f5e937e9f0cd6babbe71f599c89e12685a80bf7d915dcb204279a3c782f77d946797798b
SSDEEP

48:aDV1qEqevmVglLXkPbIVwhMXrDhMveiJMwKMRuqSOB:6qevmVGgPkVwyDQeiJMwKsxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31208347817bae55ef89ec489aa2285d5f359536b9386b946bf15c05f2e31e68.exe

Files

31208347817bae55ef89ec489aa2285d5f359536b9386b946bf15c05f2e31e68.exe
.dll windows:6 windows x86 arch:x86

514c6c98ada0bc59a07c38ac0cfc03ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

fwpuclnt

FwpmFilterEnum0
FwpmFilterDestroyEnumHandle0
FwpmFilterCreateEnumHandle0
FwpmEngineClose0
FwpmFreeMemory0
FwpmFilterDeleteById0
FwpmEngineOpen0

kernel32

GetModuleHandleA
DisableThreadLibraryCalls
GetProcAddress
VirtualProtect

Sections

.text
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ