4f6aac25310e7ab2bbc72793e1725680N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f6aac25310e7ab2bbc72793e1725680N.exe
Size

24KB
MD5

4f6aac25310e7ab2bbc72793e1725680
SHA1

3de99b71e74e89c4adf6ab309259f00314b2a0d8
SHA256

9f4e6a087f0589bef0b169d3a7a6ba29b978e5cbb783ff5b749f65b750b12517
SHA512

7d52cb1e943405bad380ec1a6424db56f06923fcb8faab3a75687d47293894df68b4651ec9521b0e0d667ef58e5446263361cb513dadacdaef51d80c0d16c20a
SSDEEP

192:aEziYIk7VQ5ANWF5shCC0dbYzfmuPMoDlUvDje2A2z4puuLTEef3sfrpEBgOWtaj:aENVb0db0+69lCS2N4pkGk3YMW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f6aac25310e7ab2bbc72793e1725680N.exe

Files

4f6aac25310e7ab2bbc72793e1725680N.exe
.exe windows:4 windows x86 arch:x86

e74c31d11e7570d6571da70016af25f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcW
PostQuitMessage
SendMessageW
CreateWindowExW
ShowWindow
UpdateWindow
LoadCursorA
LoadIconA
RegisterClassExW
LoadStringA
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DestroyWindow
LoadAcceleratorsW

kernel32

GetModuleHandleA
ExitProcess
GetCommandLineA
HeapAlloc
GetProcessHeap
lstrcpynW
CloseHandle
GetStartupInfoA
ReadFile
CreateFileMappingW

comctl32

InitCommonControlsEx

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ