1e2d3e2dea5eb18aae3d637d2f936650N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e2d3e2dea5eb18aae3d637d2f936650N.exe
Size

63KB
MD5

1e2d3e2dea5eb18aae3d637d2f936650
SHA1

6cf797103c8b670467cb4867656ad4ddf0d684b0
SHA256

ab4e66d3ec58eba3cfeb4188fb3b839e2f62f16fad5f83958426eb2edad30920
SHA512

aa58be78046b9b5d21ecc8df5521336038d48a5964ce8cb1ee506e354aef0aab62e649bd3da7c8b77c4dec3d425eb47ba55ff2efb9bc70441b01293fe9ea8201
SSDEEP

768:hTZSVFQH3ZKv8Y/WJIaLglXLlKqZnMT1Syn514WokRjDOF2MT2X+8epWChYjTfdA:hTZeTbXoqZMvtRjDVMu+8ecH60Ls

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e2d3e2dea5eb18aae3d637d2f936650N.exe

Files

1e2d3e2dea5eb18aae3d637d2f936650N.exe
.exe windows:4 windows x86 arch:x86

4997f462de87cb8d93579a804b5b0b4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32First
WerRegisterRuntimeExceptionModule
GetCurrencyFormatA
BasepConstructSxsCreateProcessMessage
OpenProcess
CopyFileExW
timeGetDevCaps
ActivateActCtx
QueryProcessAffinityUpdateMode
timeGetSystemTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE