1da8db3884e09da83a855ca9c3be0d30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1da8db3884e09da83a855ca9c3be0d30N.exe
Size

3KB
MD5

1da8db3884e09da83a855ca9c3be0d30
SHA1

3c48998e9b7f55b07026c5e5b4a402f11f113cc0
SHA256

60b6cac6b63913d8e864ed5a9c8ce89a793e7a04cb9637fd0ad7b7394c0bc77d
SHA512

dc246940618606a673e1ebe88b620d01aa4d8f0fa1f248012370884ea000e8ee732bcfd46d6e051d2fd32b1deb749d96e07d53414ba651880426b0fbdaaa0867

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1da8db3884e09da83a855ca9c3be0d30N.exe

Files

1da8db3884e09da83a855ca9c3be0d30N.exe
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ