5ac9f90ac563af5cf4bbd1c10e932fa0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ac9f90ac563af5cf4bbd1c10e932fa0N.exe
Size

63KB
MD5

5ac9f90ac563af5cf4bbd1c10e932fa0
SHA1

f22739747235ec992d9f185abc8f5d94fe326afc
SHA256

a41675eed72cb4be4477231f80094db991fcaec1cc85a1f14f06f6dcf7dd9d2b
SHA512

044fb7762999978a88d07ea1c203aeaf7fd3f232897d6626a20c73484c00395b80257be65dbb5975972bd761d53223b49ea2646641a826edeaaccc909de0f419
SSDEEP

1536:y1iXwZYo7TuNUWdNiusB3ITgzdBWGK+LFGqMiQKc:y1iHmuAB3Ygzd0GK+LFGq6t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ac9f90ac563af5cf4bbd1c10e932fa0N.exe

Files

5ac9f90ac563af5cf4bbd1c10e932fa0N.exe
.exe windows:4 windows x86 arch:x86

5cf01d16bec788864489ce577521d4cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetQueuedCompletionStatusEx
ReplaceFileA
GetSystemTimes
SubmitThreadpoolWork
ConvertSystemTimeToCalDateTime
EncodeSystemPointer
GetTapePosition
SetNamedPipeHandleState
OpenSemaphoreW
GetAppContainerNamedObjectPath

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE