2cd77b0557592170ce79d9e6daf52990N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cd77b0557592170ce79d9e6daf52990N.exe
Size

63KB
MD5

2cd77b0557592170ce79d9e6daf52990
SHA1

1d72c106e46b8155d5d3ccec636cef9817d91d25
SHA256

f38182746c11d799197cde00f4517ffefc576d77252f9f9009da48c1868ddde4
SHA512

4504bab253bdc1858dbc45758d466c7b2180324ae133e492565f88f29d449e7dbf5fa37e95cd68bb4ce466a3ff0a5dffed1693ca0b117ba98f87b6cb19897d98
SSDEEP

1536:qJMgeNVAzvRddMsyhkOeD5e42QnvQEcNLDFSOOcLYgJgEx3:qJ8NVwpMszOMWKaUcww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd77b0557592170ce79d9e6daf52990N.exe

Files

2cd77b0557592170ce79d9e6daf52990N.exe
.exe windows:4 windows x86 arch:x86

125a9dc37ccaca20056333117487704b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesLengthW
GetProcessHeap
CreateSemaphoreExW
GetGeoInfoA
SetVolumeMountPointA
GetThreadLocale
HeapSummary
PssCaptureSnapshot
WerUnregisterMemoryBlock
SetConsoleWindowInfo
GetAppContainerNamedObjectPath

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE