fbb048ab2464bab5328c8ab6bb3e1a80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbb048ab2464bab5328c8ab6bb3e1a80N.exe
Size

7KB
MD5

fbb048ab2464bab5328c8ab6bb3e1a80
SHA1

1c2c1740edd8f380e6115334edad50a887249a3c
SHA256

9f1920f0e150ff90f399f4fdf2fd6f8b83c7f92ae9fdcfc70048328b6fbd3b97
SHA512

f36ffb7f99574c61e4a929e2e195904ee9a7f6edbe174c00eac367c04d9568870024fdc718e5bf1111f1c35f1b59a4d61c7bffdcc4abd63ddebc62bcf71e440e
SSDEEP

96:iLqwXqxsPNBH25q8okuHnnwR2U02ClAhxGoStDOYXAqtYltNYnWCYCqI0zaJd:imw6xsPTHbnwR29BAN/uM5Z4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb048ab2464bab5328c8ab6bb3e1a80N.exe

Files

fbb048ab2464bab5328c8ab6bb3e1a80N.exe
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ