5f27e2bb68d432b489f6f2174dcfa010N[.]exe | Triage

Sharing

General

Target

5f27e2bb68d432b489f6f2174dcfa010N.exe
Size

184KB
MD5

5f27e2bb68d432b489f6f2174dcfa010
SHA1

615ef0faa2b86af7cb0c340f77e84aafee8b32db
SHA256

e4d1482323a03bf1df3371cb0b91e2eec8c34ca0025f24b07a52a134d47ecac2
SHA512

3e03628bb6ca014d9ee13a068eba203ecd3275b1595559dd13ac4a18c462817eb5c2311d70131313b42089f282194a90c443695a7bc59c6afe2c1d81cb0c7157
SSDEEP

3072:pjadqEyfQ+iV3X5Xe486aDaIbMncCDzUoSFCQ45CGSlE0k4ulcMMn3:pjadqEEU38pva0MnRzUqQ48nE3Xla3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f27e2bb68d432b489f6f2174dcfa010N.exe

Files

5f27e2bb68d432b489f6f2174dcfa010N.exe
.exe windows:1 windows x86 arch:x86

faf6966176d620fef39250aa95db75fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
GetCommandLineA
GetDriveTypeA
GetTickCount
MapViewOfFile
SetErrorMode
Sleep
UnmapViewOfFile
VirtualAlloc

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE