294819445299e9abed35691ec55d8240N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

294819445299e9abed35691ec55d8240N.exe
Size

988KB
MD5

294819445299e9abed35691ec55d8240
SHA1

0ad1bd02de669122b58a335ea5665993adc193dc
SHA256

dd4bd9c1d7137fff9ad934f0ae8bc91b9ecd40f25bc3e03191d7cd8b6a22a260
SHA512

d28ff28247db60b64b7b4004bfe7fbba74d9c8039efb9e64fdb9c9b46ff8bc9671a080bda501a8f11a0f81c8a7cc9443d1a0ffc6976c0cb12889c4b0473147c7
SSDEEP

24576:vtFLAZB6MOWsafyqsEeFqlVMvkDU9yNm7APicEJakm:vt9A79OWvf1NlVMvqUkNmkPicEJakm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
294819445299e9abed35691ec55d8240N.exe

Files

294819445299e9abed35691ec55d8240N.exe
.exe windows:5 windows x86 arch:x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ