04da8ea6604e1df109affb90bef47570N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04da8ea6604e1df109affb90bef47570N.exe
Size

65KB
MD5

04da8ea6604e1df109affb90bef47570
SHA1

aa4ddaaee10afc42048abfdce1a370b6b84570c5
SHA256

0ee5bad01c5bcf4ca7aaace3fda95dcc9e4bf308ed86520ff7017b3bbe5ccdfe
SHA512

9996e56ed0d4259e870b89dfc65455aee1f23dd3f27126559a1c9c415389a7969aea214c01a487390d2da096f5c0c38ac6646201751cf0d5348d67de3ecf0b22
SSDEEP

768:jIUhveW3VLgNRW9vui094v9Ix9D08MhDj3u2z9vZfOAFJxPVJQel81etxZ8L/KoB:jfrLgNR+LodP3xM/HiuGZIGERO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04da8ea6604e1df109affb90bef47570N.exe

Files

04da8ea6604e1df109affb90bef47570N.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE