4171acf39cfc0731ffe9e1e3516f0ca0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4171acf39cfc0731ffe9e1e3516f0ca0N.exe
Size

40KB
MD5

4171acf39cfc0731ffe9e1e3516f0ca0
SHA1

9e0afd043b9b098c59c5e2aae94bc7ee3b166fbe
SHA256

3e31401d789df54d26bc2a7afaaa6f647e25b54a8e7b49bda6d7a248aa3ff41b
SHA512

a78d9331423ce84c1e2e532d7d02dc46f9cd5bfc2335b786b8d4015e5d2f7118a31729f5acf4346f43782a9255d8ff9d0135e386e73e5145e5d64617f4b46404
SSDEEP

384:4Yn28lm/ij5PFUcLCWOTUNGXgZB+GA80PZxowIDpse7r1AZB9HU166:4Ynfm/ij5JtJqgPxA80PZxkFEr0166

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4171acf39cfc0731ffe9e1e3516f0ca0N.exe

Files

4171acf39cfc0731ffe9e1e3516f0ca0N.exe
.exe windows:4 windows x86 arch:x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ