1685747712[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1685747712.exe
Size

4.1MB
MD5

04cd6ab751166027108daea466243b4b
SHA1

f9835a63b8ba653021cea4382cfc09865645dffe
SHA256

2601b2ff8516a8e5d660e46187165c4ade1adfcaf182074a7414f2afe3af2f4c
SHA512

49a83b1925f1b05b07f9a4df7b094e76ea33843c9be2bac2c8d8f09750ccfac2d05670be0a5cb219f76ab938a7eb747a14a95b66055c61e62613fe80328afb1e
SSDEEP

98304:RkhgOlviUOBjM9qyj1BzQ4dR6X+Bg7Wj2X/PQLC:R3OEkcyJBzQveg7Wjm/PQLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1685747712.exe

Files

1685747712.exe
.exe windows:4 windows x86 arch:x86

77bfc22e3a14de5890a5d95db59d66e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

RegOpenKeyExA

comctl32

DSA_Create

mscoree

_CorExeMain

shell32

SHGetIconOverlayIndexA

Sections

.text
Size: - Virtual size: 8.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shared
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE