7e7200f734df04980355231eb085c020N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e7200f734df04980355231eb085c020N.exe
Size

24KB
MD5

7e7200f734df04980355231eb085c020
SHA1

972dff53b180fc401fd6a6e9228f80d115285e93
SHA256

80d6f6276ee30e2ce1d4dbf643a55e61d0be2d51e922d7e86e9ad789c1993cfc
SHA512

eb87e455c6a3a516cc61411d6dacf1585dfa9f7acc53dd154212fb0569952e7ceaeac6d252ed1a40a09116eebe1752037b65ba53d5be4449fa953d75db2f72d4
SSDEEP

192:/qO747AnZKg00mcWX7ofJhfwKtDtF97D9Vj8/UNrxmAi:aexxm/eJ9weFD9R8/QVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e7200f734df04980355231eb085c020N.exe

Files

7e7200f734df04980355231eb085c020N.exe
.dll windows:4 windows x86 arch:x86

8389439938dba763432d31d218e444b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

user32

DestroyWindow
CreateWindowExA
FindWindowA
RegisterClassA
LoadCursorA
DefWindowProcA
LoadStringA

gdi32

GetStockObject

ws2_32

WSAGetLastError
recv
WSACleanup
WSAStartup
inet_addr
gethostbyname
getservbyname
htons
send
connect
closesocket
WSAAsyncSelect
socket

lgpf

ord19

msvcrt

_initterm
free
malloc
memmove
_adjust_fdiv
memcpy
memset
atoi

Exports

Exports

NLFreeConnect
NLGetConnectMode
NLGetConnectState
NLGetErrorString
NLGetLastError
NLGetLastErrorSys
NLInitConnect
NLIsServerPresent
NLReceive
NLSend
NLServerConnect
NLServerDisconnect
NLSetConnectMode
NLSetLastError
NLSocketWndProc

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ