3bf24764692ebdffaa06d2668f3a25c0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bf24764692ebdffaa06d2668f3a25c0N.exe
Size

119KB
MD5

3bf24764692ebdffaa06d2668f3a25c0
SHA1

e5749f914c06badb2f3a0db79a29e937ff9352b4
SHA256

39374f6ba483032d008a763dfca11df64c4a77b70e1f69565c827e82af03d5a3
SHA512

26ba7afa317a85d96c36abfb425d77eed10ef54bd71f9bd5b232abefc6b1a5c8c08a64a12c0988fe5b0dcebef6dd40319cdb53a9631e9bc165516f375ff21999
SSDEEP

3072:M+ZEXYxnhPTZZH3jHLYCAaltix8iSTgdWwspiSGkA9V:vZEOdZZzrYC/WdZgmS8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf24764692ebdffaa06d2668f3a25c0N.exe

Files

3bf24764692ebdffaa06d2668f3a25c0N.exe
.exe windows:4 windows x86 arch:x86

2a6d284bcf1757f4f377af4d422617f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvOpenRegEntry
GetConsoleAliasExesLengthW
AppPolicyGetThreadInitializationType
SetCommConfig
LZSeek
DnsHostnameToComputerNameExW
CheckNameLegalDOS8Dot3A
GetProcessDEPPolicy
SizeofResource
FreeConsole

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE