0fd8d62033960eb9e4ed3b00524f4950N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd8d62033960eb9e4ed3b00524f4950N.exe
Size

38KB
MD5

0fd8d62033960eb9e4ed3b00524f4950
SHA1

d58c055168b756863c29a18a64be14358b63a802
SHA256

b8647b9da4142b677e216d855436f3f75806026ed19ae6e178ded4bd404f4948
SHA512

ea2df029e643335ea51dcd861ee9cba4eb72f7e6adc6f74290c3e996ddb972ff70818b1a91ec795d2503d7d10e733dd72e58414ab4efaa34523048582fc1e94e
SSDEEP

384:8ymGIDl8anPvH4kyAP3VPmVUj42pOFCyoeTemVz06pRrLXCAlc8gjLdZi:8ymKUPvYePEUj4+OEWxDq7Di

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd8d62033960eb9e4ed3b00524f4950N.exe

Files

0fd8d62033960eb9e4ed3b00524f4950N.exe
.exe windows:4 windows x86 arch:x86

58e1a430f59350c9585038ed7317a676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
MessageBoxA
GetDlgItem
UpdateWindow
CreatePopupMenu
CreateMenu
RegisterClassA
DialogBoxIndirectParamA
InsertMenuA
CharLowerA
ShowWindow
DestroyMenu

kernel32

CloseHandle
LoadResource
LockResource
FindResourceA
GetModuleHandleA

gdi32

CreateFontIndirectA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ