d54fb9442bfb06a51d31c20bdfe18620N[.]exe | Triage

Sharing

General

Target

d54fb9442bfb06a51d31c20bdfe18620N.exe
Size

28KB
MD5

d54fb9442bfb06a51d31c20bdfe18620
SHA1

8b3b63cfb3199e3336aba3b52a11530731f736c0
SHA256

4dd181fc409eb22629054208ab2785f0e95fec342e9e55549edbb957f9e4518d
SHA512

33d53c91f89851d564ca1527d0c8b99faac5174ccc3626b0501a08c0c914a342956bd4602d93169f3b19ac0d8cabf7489bbfbbd3951460cac040153f8508af76
SSDEEP

384:0u1MfDP3WwG1pB/yQWOO/+094giPNPHaMc:dSa/XB/KTG0GgiFHxc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d54fb9442bfb06a51d31c20bdfe18620N.exe

Files

d54fb9442bfb06a51d31c20bdfe18620N.exe
.exe windows:4 windows x86 arch:x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ