152b0482f04f7e17072bb531301bf070N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152b0482f04f7e17072bb531301bf070N.exe
Size

66KB
MD5

152b0482f04f7e17072bb531301bf070
SHA1

4b6023477a1ae2d50a0cda4953c67661d34fef4f
SHA256

300fa1f3669fd9c5dbd07a37fd3b34ff5bcf3e2a33bc499f29f109708cbb30d9
SHA512

dfa05813cd35ea386ef1f4ff34763e0bba31d596d3819074a1abc00e51c4b5dd37522ec7209ada547ea2cf2fafdd683f6d55bedce193ac50819a62d21c87de89
SSDEEP

1536:31RJs3rYiIzKhwRLI3McJf/L+oDxATmcrjdx9L:LJaNIzKOtIccJ6oDxsmYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152b0482f04f7e17072bb531301bf070N.exe

Files

152b0482f04f7e17072bb531301bf070N.exe
.exe windows:4 windows x86 arch:x86

a8410724b3ecaea799fa7a7af12f9db3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeClientComputerNameW
SetProcessDynamicEnforcedCetCompatibleRanges
WakeConditionVariable
GetProcessShutdownParameters
UpdateProcThreadAttribute
QueryMemoryResourceNotification
ResolveDelayLoadsFromDll

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE