b120568e6ac1da0ca348dd8780f930c0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b120568e6ac1da0ca348dd8780f930c0N.exe
Size

52KB
MD5

b120568e6ac1da0ca348dd8780f930c0
SHA1

08d175be6619b592757ff855040aee948beb780b
SHA256

ea70b1877d5854ed4b1ba7d07a9cfc7440b157aad7aa32e678632c1833f3f6c9
SHA512

668ea318b96e5c5f543c8f2a8d8a99c42e2b86c360b5e447f3a7094dde4cb85ffb0f5965ffeb4dba57b214c82217a0aeedb8d383fbca3fcb47f4284d1b4dcaea
SSDEEP

768:2PitRNEGtXXnZ/JudBDtcUtdVCxVOS3fNGq5xgBUSE4:RF3wDtkx3P5xT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b120568e6ac1da0ca348dd8780f930c0N.exe

Files

b120568e6ac1da0ca348dd8780f930c0N.exe
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ