59e79254c5b735d18b509ee18a184180N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59e79254c5b735d18b509ee18a184180N.exe
Size

3KB
MD5

59e79254c5b735d18b509ee18a184180
SHA1

9df4df45c69a4ce15ee5cdeda7dc921d979d27c5
SHA256

8170209ca77750927ec7bf1ee58170aa49a1035d043ede3b367ec163d18f7281
SHA512

30b3acbb88e08d58cf46c253d89f314d6887d2461c6f2155cb432bed898fc137cc425318fcc916866ef7c506a0d6ffb150492f3083b8d42b40d2ff1fb70f5190

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e79254c5b735d18b509ee18a184180N.exe

Files

59e79254c5b735d18b509ee18a184180N.exe
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ