306de6eb2072409e31e622f181b46820N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

306de6eb2072409e31e622f181b46820N.exe
Size

30KB
MD5

306de6eb2072409e31e622f181b46820
SHA1

32a8575c564f7c65e655510423cee3f04a9e8434
SHA256

234e32897942b1aab43920fd998fc7fe0dd657cd37ee7e0295f81039cc1354ee
SHA512

e36c1a660acfe1399b71b0112e1c1c317b6991e8b9d3a01540a491791f1fd34c0d3aacb92e102dba20edc6d15026fcc71b0462d9244e03fc9187f9ec03642747
SSDEEP

768:hmCeXuucVt13vfdHldhwyE7+OGa0MLnLI:hpeed13vfdHldhwd+OGa0MLns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
306de6eb2072409e31e622f181b46820N.exe

Files

306de6eb2072409e31e622f181b46820N.exe
.exe windows:4 windows x86 arch:x86

d48847f05c5fd88a678b7af8d736f338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
VirtualAlloc
VirtualFree

user32

RegisterClassExA
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ