03744048714d75926b50e8d2605dca10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03744048714d75926b50e8d2605dca10N.exe
Size

3KB
MD5

03744048714d75926b50e8d2605dca10
SHA1

7c066551d1e9b15600f3471188682f591005bd25
SHA256

43252d27a01b99d653ca1d2d74862b3fc61c65c1e94276f699d71c46a564c696
SHA512

36b610178e996f76b14481330c5c8120b7212c93197795c5e787b8f7a15bcf5231e7503206a3b96c283b6e6784099a555e7ab0572a79e1028d1ad19641f2e600

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03744048714d75926b50e8d2605dca10N.exe

Files

03744048714d75926b50e8d2605dca10N.exe
.exe windows:4 windows x86 arch:x86

fe76f60bdc1a567148451daede9ced15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
GetFileSizeEx
GlobalAlloc
ReadFile
Sleep
VirtualProtect

shlwapi

PathFileExistsA

Sections

.text
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE