c0f0577b3c06fb0cf41b4fd0e19f7f20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0f0577b3c06fb0cf41b4fd0e19f7f20N.exe
Size

70KB
MD5

c0f0577b3c06fb0cf41b4fd0e19f7f20
SHA1

7b3ffb6ae4cacfe206fae1909792a175db1e3159
SHA256

9762eabf28e970e6ff2893dee81de32b731c23f754941248d863f61e54593644
SHA512

6692ddc9aaf85be094e91b26d0c023e737d1ec732e0e8a848419a33fdfbc352a63f9065d49309f47640a34d0a4b1b33e96aec7c74871cfa5aef64e9b9290e295
SSDEEP

1536:xv/Gn6G8eQuC9PLb8okGNnZsq9xnIP3wlrFPCy5SfR+6S/fd7eZGWK5Mv:x/hNpLzN9nIPWFPCKt/Jh5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0f0577b3c06fb0cf41b4fd0e19f7f20N.exe

Files

c0f0577b3c06fb0cf41b4fd0e19f7f20N.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE