3e520cda9fc0fcd168497e71f18877b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e520cda9fc0fcd168497e71f18877b0N.exe
Size

38KB
MD5

3e520cda9fc0fcd168497e71f18877b0
SHA1

36cf41cbf570fdd2ff1eea28c80b5769ff0886ed
SHA256

6dd6e02d9b88efe25d69d776818061525ae00b7bedb64e772ae1d8b6afa21c5a
SHA512

8d29978cf28491f8c2dc63fdacf3ec78c4f2ceda9fed022e73a35770cc29371130c201d82ab154b1e350c0b7b3cd38d78c15ba3244bae33bfee1cdedb592b4b1
SSDEEP

768:swg9aYfQkXdmCdMimsENm4QctLEF+BbvZ0:sR0QQwndcsE0vCvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e520cda9fc0fcd168497e71f18877b0N.exe

Files

3e520cda9fc0fcd168497e71f18877b0N.exe
.exe windows:5 windows x86 arch:x86

40cfd28337d574135a64316bfef4f77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateSemaphoreA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
LoadCursorA
RegisterClassA

winmm

mciSendStringA

msacm32

acmStreamOpen

Sections

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 983B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ