098e12e3220bf34263b7d5b4cd63e520N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

098e12e3220bf34263b7d5b4cd63e520N.exe
Size

63KB
MD5

098e12e3220bf34263b7d5b4cd63e520
SHA1

8b00ecd34bfe3f3e8e1105e1e789f3245c09e003
SHA256

fdf1c1411d033234dd0f1f0152ad4cb342cabfd08ad07c988182053b7c6f3d50
SHA512

5015e821855dbb2be5be539ad645c77451a7d618e80d9762b39f1345e0eaeccd8a0a3abf1ab69ca1ffd7a8b0e5fbf3ec05d254339d86137a2828788b419580ff
SSDEEP

1536:Pl84vK/23ly89RS6jumDUZwuAmKzsFYNVqK8Q:+4y/Cy89RS6juaswjr4AL8Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098e12e3220bf34263b7d5b4cd63e520N.exe

Files

098e12e3220bf34263b7d5b4cd63e520N.exe
.exe windows:4 windows x86 arch:x86

ec0c6bcb12c76cc11defe234121f6341

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrefetchVirtualMemory
SetTimerQueueTimer
ReleaseActCtxWorker
ReadConsoleOutputA
GetCalendarDifferenceInDays
BasepAppContainerEnvironmentExtension
GetStringScripts
ReadConsoleA
QueryThreadCycleTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE