fbd5c9070b24e8d0efb609b5bd945d30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbd5c9070b24e8d0efb609b5bd945d30N.exe
Size

70KB
MD5

fbd5c9070b24e8d0efb609b5bd945d30
SHA1

a12584dbdf099a4cd40c8c011e495a3f2e2c7df1
SHA256

9309d77986a90930790be527af9fc3ed5024cabe1908cb6371d72a3eac359555
SHA512

59153a0a3bf9ab203df555f878edb9fcf4a12e10505f491455d4f3bb1500b03cf090255fe1f92451e8a9f984b124604fae32f1f6eb9e92aae4bdc775f4eb39bc
SSDEEP

1536:xVU/dYYgahv7wBFcJhCzJyFP46pEg+gpbDt:jU1YYgmv7GxyzpEg+gH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbd5c9070b24e8d0efb609b5bd945d30N.exe

Files

fbd5c9070b24e8d0efb609b5bd945d30N.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE