c0de64ed6c60f6dbdf87a3ad5658cc50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0de64ed6c60f6dbdf87a3ad5658cc50N.exe
Size

67KB
MD5

c0de64ed6c60f6dbdf87a3ad5658cc50
SHA1

0c647086fb94d27e1cbbffc4b51e2e50eb5afb5c
SHA256

8faf32a7500ef77e88dc5701f5905e036963f9037c611c7f193287745aa55cf2
SHA512

b8e587e2c70d20865d908b4e3c3df023bad1d855b0b7c8a19ffbcebecd0773d4610332f09be9f456b21b93b52400aa2ff3326487973453e698a89bc58ff37b6b
SSDEEP

1536:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsryrEgxSSr:mq/5jMIPtdgI2MyzNORQtOflIwoHNV2o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0de64ed6c60f6dbdf87a3ad5658cc50N.exe

Files

c0de64ed6c60f6dbdf87a3ad5658cc50N.exe
.exe windows:5 windows x86 arch:x86

a3e8b5e80d5f9f266119a4ac18211954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
TranslateMessage
LoadCursorA
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FillRect
GetWindowRect
KillTimer
SetWindowPos
BeginPaint
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ