3659463941b8d8cd47a2c646a5d19d20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3659463941b8d8cd47a2c646a5d19d20N.exe
Size

501KB
MD5

3659463941b8d8cd47a2c646a5d19d20
SHA1

c5cc3d1c69e2d35f6fa3098fedfa2a46d179e63c
SHA256

5a63b0a4b009a8698ee5759152c96069b0802e834c43c899848b902d87d34d51
SHA512

f7b6e64b5c2ca57b7b50f476e6e520837df13b64a775f309fad127b160a0b70e1934a771eda184bdaa9043a7cb0bff24d7a618a82b5d94cba5405f346a2fd938
SSDEEP

6144:iowI7cTtC0/wguJpVopIM/eiG3cE9bAxsfW7qz1jC84PXJcKK8dz5CnezFOHP9DJ:iowI7cTI1jJ7oaz33O6euNC8+Zwp5k6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3659463941b8d8cd47a2c646a5d19d20N.exe

Files

3659463941b8d8cd47a2c646a5d19d20N.exe
.exe windows:4 windows x86 arch:x86

429dd7cbe09c2eb590a8feaef7b3f5c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
SetVolumeLabelW
ConsoleMenuControl
MapUserPhysicalPages
SetVolumeMountPointA
LockFileEx
DebugSetProcessKillOnExit
GetFileInformationByHandle
MapViewOfFileEx
BaseProcessInitPostImport

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE