38eea1cb8ee63ff14187d7642f1329b1082d6a829f38846b714eb179bd319a31[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38eea1cb8ee63ff14187d7642f1329b1082d6a829f38846b714eb179bd319a31.exe
Size

56KB
MD5

a4dd16d48332b84c1cd78a4fb6af5d60
SHA1

387d51e07df2b50bb3b7bcb8dd9158556250b8ef
SHA256

38eea1cb8ee63ff14187d7642f1329b1082d6a829f38846b714eb179bd319a31
SHA512

b31b7ffd5ea5f7e92803a30448d14b1c4365f9290bb3d59e09c94bfd39717b3ad78f48c0ca08c4ea051dd19c154420bc3de766e8ca54e19f5b596a2c94326dba
SSDEEP

768:cUbG5yZQK6Mqs6nak2/07vwIaJEbm/pwnwuNMQDhVTfhOBONcfkFWMd1c2Zor64b:zbytDCKb+ww+ThuONsCBcIortb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38eea1cb8ee63ff14187d7642f1329b1082d6a829f38846b714eb179bd319a31.exe

Files

38eea1cb8ee63ff14187d7642f1329b1082d6a829f38846b714eb179bd319a31.exe
.exe windows:4 windows x86 arch:x86

f215b5c4ee0972f7a43ee4bb57bbe385

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumerateLocalComputerNamesW
FindFirstFileA
FileTimeToDosDateTime
GetConsoleTitleA
CreateDirectoryW
FreeEnvironmentStringsW
CreateEventW
AddRefActCtx
TryEnterCriticalSection
GetFileType
SetThreadPriorityBoost

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE