7d98b137384411e868e26e75d273f690N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d98b137384411e868e26e75d273f690N.exe
Size

234KB
MD5

7d98b137384411e868e26e75d273f690
SHA1

7a85ce2aca3944ae5d51be77c7a6a3e5d038f200
SHA256

3cd2d1f5f140383d3f36f5a5f391a3e86a08bbb22a8a151bf9102f5851f38510
SHA512

4e737bb4b7f0f5c9aac768baa6b867932fd551e97e8cbb0c0a80163bf4e331015d38f4e8247a29d495849e72bbe08e286474d6403e5294addf2673c6d3a4fa0e
SSDEEP

6144:wNmp4nly7n9Q1MmsbSv0QuuQlCrXv8NsZqElDOWrWiM9YzCQ2:wEunQJjmweZuuO0XkyZqELM9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d98b137384411e868e26e75d273f690N.exe

Files

7d98b137384411e868e26e75d273f690N.exe
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE