7972358d46ebc0335be41c1619950d10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7972358d46ebc0335be41c1619950d10N.exe
Size

359KB
MD5

7972358d46ebc0335be41c1619950d10
SHA1

97fd527ed49f26686c60ce3eeba5642379ef0115
SHA256

62cae9c5373b3d1ea62fed7fff087c5fbd8f2837477d2754ad99c878b247a0c7
SHA512

bc5c5be7b9302880f34928b0813d9307026ea55dafa59325ee8e0ee8af4da63513c2a3dc33f034937c46588f484178359578a54643be4c368d6f2b6aceebadf1
SSDEEP

6144:caQbjyYHO1H7CmMJg+ewrvZLNZbt5kT7GynSrCj6xamBuCdibJI0hWuU4ZomCQhB:cT5Ow5k/5nSrCjWZdCsGH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7972358d46ebc0335be41c1619950d10N.exe

Files

7972358d46ebc0335be41c1619950d10N.exe
.exe windows:4 windows x86 arch:x86

de6c7cb6a3205debfc6ae490248ff623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
QueryPerformanceCounter
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE