c340b19cd41f4fe6bd127c402cfd9100N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c340b19cd41f4fe6bd127c402cfd9100N.exe
Size

63KB
MD5

c340b19cd41f4fe6bd127c402cfd9100
SHA1

f7137b611716939f776a02331dfdae4d3cc35ac0
SHA256

208938e8cfaa7a386f8c54e695ec669e2e140644ba0cd5a4d55de121168e0ede
SHA512

05afd4dce001d077ee48d14d42efc2c67d65e389bbdd91ddf44e573c99371cc7e9850b680f96ad177c1cb35e4d0b9e702634994a2a81d4e844caed9c86c26d0f
SSDEEP

1536:cIdMbSoTPBdq82ZvlDCOe+yW4Vff5pBs9IiX1tjEv3m:EXl0xlDCOM3/BsCyz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c340b19cd41f4fe6bd127c402cfd9100N.exe

Files

c340b19cd41f4fe6bd127c402cfd9100N.exe
.exe windows:4 windows x86 arch:x86

9ae5344aa61835e05c9bb07328bc5d15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaNodeProcessorMask
SetFileIoOverlappedRange
WerUnregisterExcludedMemoryBlock
GetXStateFeaturesMask
EncodeSystemPointer
SetConsoleFont
GetCurrentConsoleFont
CreateRemoteThreadEx
OpenThreadToken

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE