68ab9e610aaf6b36e9907ed3be8bccf0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68ab9e610aaf6b36e9907ed3be8bccf0N.exe
Size

63KB
MD5

68ab9e610aaf6b36e9907ed3be8bccf0
SHA1

41a2755d4c4785b391dbc26302e45223fc1238df
SHA256

376b4fc9649c84e95961920eca4faf75c8a8f1c750155c3eeee8b362a9dd8700
SHA512

34813d40f7315c4d1e114ff71c7b2b020620e6dd3a779cbb9dbf614c2d45e25714c0d6d8565c0e230042a513a5193c0cd75fe04dbc75e0892e8c5b48fb8070f8
SSDEEP

1536:KvQRrcnYbgzEgBMGclwpck2kHPBXgAvWVTebJ:KvQrbgQRqxvBXgY4c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68ab9e610aaf6b36e9907ed3be8bccf0N.exe

Files

68ab9e610aaf6b36e9907ed3be8bccf0N.exe
.exe windows:4 windows x86 arch:x86

df194a2f2159715ec0af33091facc7ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
ActivateActCtxWorker
CallNamedPipeW
RegUnLoadKeyA
WerGetFlagsWorker
CreateFileTransactedW
BasepSetFileEncryptionCompression
FindResourceW
PrefetchVirtualMemory
PackageNameAndPublisherIdFromFamilyName

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE