0dfef2733bfc202c730deb923db81e40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dfef2733bfc202c730deb923db81e40N.exe
Size

1.1MB
MD5

0dfef2733bfc202c730deb923db81e40
SHA1

5eb9766df76e7a2f1cc93570a4d0092ae2b86dde
SHA256

dba46cc28b889c84e2dc87850348c8138e14adeb98bf9e5688922e74ec37bd99
SHA512

7a0decbf18aee7810c76d2fc7b2f33e8496553c8bdbbe06a85c3dc9eaa8b3d51cf649b6dd50888534e2d708bb45e6ebacf7e83ac5744f8c790fb30bcf390e336
SSDEEP

24576:RL75zg9aJll+vHrjurmWrzb//XFY19gtuE0sNyi:RPNgUl+DjSL/dY16Si

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dfef2733bfc202c730deb923db81e40N.exe

Files

0dfef2733bfc202c730deb923db81e40N.exe
.exe windows:4 windows x86 arch:x86

78ee978b49cb2609a78c2f04f4d184cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetVersion
GetTickCount
GetModuleHandleW
GetCurrentProcessId
GetModuleHandleA
GetLastError
GetSystemDefaultLCID
GetCurrentThreadId
GetCommandLineW
GetUserDefaultLCID
VirtualAlloc
InterlockedIncrement
lstrlenW
GetFileSize
LoadLibraryA
GetVersionExA
SetEndOfFile
CloseHandle
HeapDestroy
LCMapStringA
GetModuleFileNameW
HeapCreate
SetFileAttributesA

Sections

.text
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ