54eb3cabc5c2bbc4d47d04ab673bcf10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54eb3cabc5c2bbc4d47d04ab673bcf10N.exe
Size

63KB
MD5

54eb3cabc5c2bbc4d47d04ab673bcf10
SHA1

3ecc0df5c44899ab15aedcf01dc00f78b4884b7a
SHA256

be671aad9a09a60c799a2900cec22f5274b2d10d41d818441b5ebc1dfda9825b
SHA512

c6facb4b4267a16a0bbd7e80a92808153d6f7f47bea58cdaa4dc1685094e7b2d499fd17a7a0815517d331b245d7bcf944fde54497af3946d8bee2645dbb4466a
SSDEEP

1536:Vdo7sXFVMm2tI3rVTGZNxAtvWIt88iybxhw+wmvRz5mMEC:Vdo7sUyM3ABWmNiSxhZwEz56C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54eb3cabc5c2bbc4d47d04ab673bcf10N.exe

Files

54eb3cabc5c2bbc4d47d04ab673bcf10N.exe
.exe windows:4 windows x86 arch:x86

e0eadbe934b2f3c3e272ffb7aab99819

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
lstrcpyn
InitializeProcThreadAttributeList
GetProfileStringA
GetUserDefaultLangID
CloseProfileUserMapping
GetConsoleDisplayMode
BaseInitAppcompatCacheSupportWorker
InterlockedExchangeAdd

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE