1e41446923b257743b6c282258f327e0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e41446923b257743b6c282258f327e0N.exe
Size

13KB
MD5

1e41446923b257743b6c282258f327e0
SHA1

7a874df2ede0067c0cf8f4cc988ead5a6a908d66
SHA256

eef2be870ff5fc10631f2d817cf9b5425a6e3ceef1c2e417bf4235b7d0f7cf6b
SHA512

ec661289f09c2903983fc6f7978a0c34f05dd7fdab58d3ed3d862fcf5b5f4ee34d3a682ddad21900c58e2fddf624963a487ab0cd7d4c9eaeecb86a0b163137bb
SSDEEP

192:lHFwFITsYHSYHhL3k5t4dLpxuG/ro3oCOuMydkwK:llwFITlhY5qdCQro3oCO2dG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e41446923b257743b6c282258f327e0N.exe

Files

1e41446923b257743b6c282258f327e0N.exe
.exe windows:5 windows x86 arch:x86

d0b8285184365a838ba34f4f2ef57766

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetOpenW

kernel32

HeapCreate
GetModuleFileNameW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
GetTempPathW
lstrlenW
lstrcmpW
ExitProcess
GetFileSize
HeapAlloc
GetModuleHandleW
WriteFile
ReadFile
CreateFileW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ