51c2248ff7549dc6d78f346720462010N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51c2248ff7549dc6d78f346720462010N.exe
Size

63KB
MD5

51c2248ff7549dc6d78f346720462010
SHA1

b0e25277a1a578420a67ec78d249e1a18c10ecaf
SHA256

9a88d2ce9ada4bf2e06d0161ccd19bee4883024717938f2272f31b2539c2345e
SHA512

2105cc48cbb2bad155c5e89bbced102c98423da709ec29c2f731568b2754b5e442e9389f364ad6cc0e33c78acb445fa905365d198ac4c876a1eb0aeec19b48bf
SSDEEP

1536:TJZ8SxT7vrCKsG25PaYvse88ylXgIJnONbL+9F3CNkd:TJp3CKyEe88yt1IbL+vCw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51c2248ff7549dc6d78f346720462010N.exe

Files

51c2248ff7549dc6d78f346720462010N.exe
.exe windows:4 windows x86 arch:x86

cf806880412a6ab148d408b5c9f1e053

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitAtomTable
HeapQueryInformation
SetDefaultCommConfigW
WerpLaunchAeDebug
ReadFile
GlobalCompact
SetConsoleActiveScreenBuffer
GlobalUnWire
GetFileInformationByHandleEx
RestoreLastError
RegDeleteTreeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE