33199ce173920a0fd00c7316aad620b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33199ce173920a0fd00c7316aad620b0N.exe
Size

42KB
MD5

33199ce173920a0fd00c7316aad620b0
SHA1

a27a64e0d193bed8ee4573983249b904c3f88353
SHA256

7979e787cf7903ae27f7aa31e4675fc74db0f1f482125df9c68c1e7ca8631fd3
SHA512

f08ce18e9e8e4e6056052561dcf9d6cf2551b0fb14008d26a0fa134b391d8b7bb003321db42f56d3773e94921f33e924d308a9b44a357f3254817f3366de6781
SSDEEP

768:Az5mImhdEWwaFXDxB1QuwsVkOtVeFhO5kw4/Q6EnqeHdnR:6mImEaFXDxB1TV1tsTO5uLkrtR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33199ce173920a0fd00c7316aad620b0N.exe

Files

33199ce173920a0fd00c7316aad620b0N.exe
.exe windows:1 windows x86 arch:x86

fb74e2a3a03e0d51e3ff32b08efca1b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapCreate
HeapAlloc

winmm

mciSendStringA

msacm32

acmStreamOpen

user32

LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage

Sections

.data
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ