6017b0a3359e6fac6a9f7bb30c748f90N[.]exe | Triage

Sharing

General

Target

6017b0a3359e6fac6a9f7bb30c748f90N.exe
Size

508KB
MD5

6017b0a3359e6fac6a9f7bb30c748f90
SHA1

af528f07ea7e295bc1c526c6cad9f44b2a39ad9d
SHA256

02f39d9530f164f90b2d46f7e45d9517e3d454a96d4c65d921b411547574b992
SHA512

28d900677ffdead1250c68e71648a012e19578faaf05f130ef95c698b6163013a91c25d23a31acc3721e4aa85bbee43175a4d23ba3449fadebbaf967f71ec334
SSDEEP

12288:dsirih6dg1dKNEbiRub1AVEPpwXCyhTlz6B:qxh6QwNEORubKVQw3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6017b0a3359e6fac6a9f7bb30c748f90N.exe

Files

6017b0a3359e6fac6a9f7bb30c748f90N.exe
.exe windows:4 windows x86 arch:x86

b31234b2a403545cc4fbf86c36c2bfc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetCommandLineA
CloseHandle
CreateFileA
ExitProcess
SetFilePointer
GetModuleHandleA
GlobalAlloc
MultiByteToWideChar

Sections

.text
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sivmap
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ