976feb189c5d7b7869e9a98e3dd9a460N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

976feb189c5d7b7869e9a98e3dd9a460N.exe
Size

5.1MB
MD5

976feb189c5d7b7869e9a98e3dd9a460
SHA1

f0de602dbc8ce404f75f1b5f02276dbf3b28b3c5
SHA256

78e5dc5ac696adfee738584b2e164ac86a6f89ed7d3d3648bd58fbc3153baa80
SHA512

e93b1d87beaa0cbd762c28b71a90d5b5337c64539475e1c9619023579fd58f366fc5fe6a28fc343d0898fb71fcd4a32f7eb342b04e9e1ae416f5af86270eeac8
SSDEEP

98304:CruB74WCHWaQwkwNuPfe9DdgUE4NJEoJ9eah9FoGwy0szeZdCQxT:vDCHW2VweFdgRSJE2gImGssMoQ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
976feb189c5d7b7869e9a98e3dd9a460N.exe

Files

976feb189c5d7b7869e9a98e3dd9a460N.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ