423a6bb03f7e14bb935f3994830b1f30N[.]exe | Triage

Sharing

General

Target

423a6bb03f7e14bb935f3994830b1f30N.exe
Size

50KB
MD5

423a6bb03f7e14bb935f3994830b1f30
SHA1

836a9cd4daf7bb270c81fd6d0bfba40a543778c1
SHA256

156dff906e053c468d5aed409d090787421e44a2dc2fa3e0bfbd1a26afe18a7f
SHA512

2034e7e2198000a652ce5290c2988bb6a1a77936cfc1863e2e8bdfb98f2e15a42c167076f3b893b86ecef5691efd8254febc5d1e027edb355fc1b54c37b141bc
SSDEEP

768:2imq71D3vp1qUjP/H2RFLPxU+btpnTK+ynuWNXa1hcBhUt6L:1dvqr9PxDtpnxynuWScmt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423a6bb03f7e14bb935f3994830b1f30N.exe

Files

423a6bb03f7e14bb935f3994830b1f30N.exe
.exe windows:5 windows x86 arch:x86

a096dfa409b500472cd05f0482f59c9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
__getmainargs
wcstok
_wtol

advapi32

RegCloseKey
CheckTokenMembership
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
FreeSid

kernel32

GetModuleHandleW
FormatMessageW
GetLastError
LocalFree
InterlockedDecrement
CreateProcessW
CloseHandle
InterlockedIncrement
GetCommandLineW
GetModuleHandleA
GetStartupInfoA
ExpandEnvironmentStringsW

user32

DestroyIcon
LoadIconW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

shlwapi

ord219

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE