60989f3d2274e45c0d1581f4fc621e10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60989f3d2274e45c0d1581f4fc621e10N.exe
Size

63KB
MD5

60989f3d2274e45c0d1581f4fc621e10
SHA1

8a53b916b933a5c114c14f0193be889b4e8690fa
SHA256

1db2658ab0bce4f7007a4b14578d4f2f27e6f6d6891b8858fe01b24f5b1e3202
SHA512

b2b5e029feda21d14dfc652cf3aa50bcce2e1b0a3f7796b8080bb57db3b0372b9cea74a6dbba170de9d6c3ea07a6d7af862a0c5ff4e616c209dcba505cb483a6
SSDEEP

1536:yqvDXuDxuWg5ywGTf0yMou4txn/xbTzC93X2X:9D+xuWg5ywGT9Mw1C4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60989f3d2274e45c0d1581f4fc621e10N.exe

Files

60989f3d2274e45c0d1581f4fc621e10N.exe
.exe windows:4 windows x86 arch:x86

81a3c33b4b02b2b0ec29624e522bc654

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
GlobalLock
CancelIo
GetApplicationRecoveryCallbackWorker
IsCalendarLeapDay
LoadLibraryExW
FreeEnvironmentStringsA
GetFileAttributesTransactedA
CreateHardLinkTransactedA
EnumResourceTypesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE