1a0fd892de531c36f370e2ae63899060N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a0fd892de531c36f370e2ae63899060N.exe
Size

124KB
MD5

1a0fd892de531c36f370e2ae63899060
SHA1

b354640b6f74873bef6352f232b45a5ff24b607c
SHA256

85e12e8e174dd1bbc3753823adbc2d2736e88e04d1c9273563d53fce78c1fd2f
SHA512

3f1da803ea7282dd64858aaf38ce6368a37d54a265ef5a28f4c745765a9b2bee81e302352568f7c72c49d01fc4e0edb71a4c5511b301e2a863d21d8076b3af54
SSDEEP

3072:FUTZLh4qrAeq0yyhyyIJyQwe9ui0yyhyy:S5iqlyyhyyIYQZ9uryyhyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a0fd892de531c36f370e2ae63899060N.exe

Files

1a0fd892de531c36f370e2ae63899060N.exe
.exe windows:4 windows x86 arch:x86

af399eb2e84e710e478920914b944b02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
ExitProcess
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ