ca204dadfedaeb43c64a88e65027cae0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca204dadfedaeb43c64a88e65027cae0N.exe
Size

71KB
MD5

ca204dadfedaeb43c64a88e65027cae0
SHA1

10f113e094c2e93de3276114fbef3edaa6264a99
SHA256

31b3ca226c1550e063a4a7a2630d5d1fa724288b3f3a5e7c2b3df99754a8687c
SHA512

fb8670c69c8ef3eca1d7882ad61cbb605d5e9bf7499b42a9d6e2539e50451cab2a2d54bf8e064f5677933633838858f1bf2609a9be7697b7c8fd46ce04db4a0c
SSDEEP

1536:1lsVVg0uuuZqcFMMknvALxibD5cZHTSt1h9N/vEju:2m0+ZqcFsvLXSm9N/sju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca204dadfedaeb43c64a88e65027cae0N.exe

Files

ca204dadfedaeb43c64a88e65027cae0N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE