3a44316d2875cde56235c96348678ce0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a44316d2875cde56235c96348678ce0N.exe
Size

70KB
MD5

3a44316d2875cde56235c96348678ce0
SHA1

484bbf31ea161898b337f033e6c128983cca64aa
SHA256

a2039f9e501e9b2d33e7d91fa4b130b482940a5cba8c8d15228de69beba5a377
SHA512

20e70963da1812e1f9e3e8fa34ed1c90c15805be87531b94d39cd79167a4a17b5f33269c16ac0b9c0587d1ac87a4bc5dc2a7c7336c32c67e6c63c47fcbe2e8b7
SSDEEP

1536:1PrvxXVyxMDjTS+XlCle1s9dGnDD/QWyQX:Brv9VyxMDjTS+XlO8s9doDZDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a44316d2875cde56235c96348678ce0N.exe

Files

3a44316d2875cde56235c96348678ce0N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE