00f3e764c6a0e0003eabab37f1b66550N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f3e764c6a0e0003eabab37f1b66550N.exe
Size

36KB
MD5

00f3e764c6a0e0003eabab37f1b66550
SHA1

cd184754baca2b849e1d74bf36ddfdeb8eefc578
SHA256

eab926edd7871d9a980a8a2b1f641f678140d7cebbd834f8f4391741e8ea6131
SHA512

a87ab088a5097b4d331d8f257275b9c330431099145b3a679a0cbf85aa9fa440290577e3d08357c8e231b9baa3f9617538404ce236183a0dccf9f66f88df897b
SSDEEP

768:KIXvZSxjHD533a5MQLtO7LeB7Ix2uAfLiox613baKQTj:Bf4HD533a5MQxO7LeRiAfLiJaKQTj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f3e764c6a0e0003eabab37f1b66550N.exe

Files

00f3e764c6a0e0003eabab37f1b66550N.exe
.exe windows:6 windows x86 arch:x86

fb9247e30c2605c3b5cecdb8d5eef505

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wmpshare.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
LoadLibraryA
GetLastError
LocalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
RaiseException

msvcrt

_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ