57fd93e7615d2beaac5c50a186005590N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57fd93e7615d2beaac5c50a186005590N.exe
Size

71KB
MD5

57fd93e7615d2beaac5c50a186005590
SHA1

8321f437d765b91d430a6622a0a50566ade9852f
SHA256

6eeb32f6a8f5090785a4a96e314eb77ca757750d707487b13646c52da29922bc
SHA512

4a6b9a16d481c75f9e23eb03ed6dbc04a3415340fb47e5fedcb0c7d887a8829bae11411a90553c26634a5c014f5b4a9209e67250872bb75b4251cf01a1cfd395
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253jO:uF+LCofRLCgxSzXo8CgpIo53jO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57fd93e7615d2beaac5c50a186005590N.exe

Files

57fd93e7615d2beaac5c50a186005590N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE