350b37e7bfd7c3a0337ebfe59a921300N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

350b37e7bfd7c3a0337ebfe59a921300N.exe
Size

63KB
MD5

350b37e7bfd7c3a0337ebfe59a921300
SHA1

f11d4a39ea6627f97b74c9919b06d432babe9b8f
SHA256

a562d02bc88a24654de99c08cad89d739ee47c193e828ff9ae86830d6e6d3146
SHA512

8ded079da7b24498a0707e76ac1af34d9d043c2604247a8fc43cff6e15d949bfb4c719ff740559c5710efd2aadafe77c7714ee06e01af6fc35f4868fd0360271
SSDEEP

1536:V0U0zw5mN4Dkq5qdM7GgQjgIGlJr3guW9tlD3GwrquF:V0HwIyDrQeMgIGl5gdttFr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
350b37e7bfd7c3a0337ebfe59a921300N.exe

Files

350b37e7bfd7c3a0337ebfe59a921300N.exe
.exe windows:4 windows x86 arch:x86

991aa43d1cff2aaef0da4a830f88dac4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesW
SetFirmwareEnvironmentVariableA
GetErrorMode
FindNextVolumeW
GetVDMCurrentDirectories
ReleaseMutexWhenCallbackReturns
AddVectoredExceptionHandler
WerpNotifyLoadStringResourceWorker
FindFirstFileNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE