488e22669150a75df47290f46a5bd130N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

488e22669150a75df47290f46a5bd130N.exe
Size

4KB
MD5

488e22669150a75df47290f46a5bd130
SHA1

4a4ba57828358acff3cbe15b0e859a746c86011b
SHA256

90284a9e6ce51ee1c6c6cad24ae22cd3a65053e8f8881e41c91f738c1585d109
SHA512

47415269e95d27b4a6fccf7c1b7dddae28fef23df266ade057faffe9b3ce52d3f644446ecb809f9332fc43438b9d5c3a27990b0e743592a455250a8b239a5932

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
488e22669150a75df47290f46a5bd130N.exe

Files

488e22669150a75df47290f46a5bd130N.exe
.dll windows:5 windows x86 arch:x86

eee5ab48f9e07352e908d25d6d1264ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess

advapi32

RegOpenKeyA

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 587B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ