4a7fdc4ef9c52126e22eff7c7144eb10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a7fdc4ef9c52126e22eff7c7144eb10N.exe
Size

63KB
MD5

4a7fdc4ef9c52126e22eff7c7144eb10
SHA1

bbb90e575ec5fb6f97c78acdf9744a77dcf8fcc0
SHA256

2b0e379b73d178b578983aabb41c7ebb98646b8fcb176c0fc723a43810ca71ed
SHA512

62b9c2417b19613d09314e4c80cae53b9cc0bd4d9f97f09039b7666d769a715c1891441739cbad8cdab714b96cb1a10dd4cf6ef8abd93941bbff076c712b3919
SSDEEP

1536:M5wZDSKVnGvQTn0uD/Pw7qMcTFh/r7/AgeA1/GIDm8:bDVncun0ubPIch/pwIq8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a7fdc4ef9c52126e22eff7c7144eb10N.exe

Files

4a7fdc4ef9c52126e22eff7c7144eb10N.exe
.exe windows:4 windows x86 arch:x86

607f898800618f3318a8f105da6bc6b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerpLaunchAeDebug
GetProcessGroupAffinity
CheckTokenCapability
SetThreadIdealProcessor
SetLocaleInfoA
GetProfileStringA
DeleteFileTransactedW
BaseFreeAppCompatDataForProcessWorker
GetDiskFreeSpaceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE