c1f758af052245b5393eb56df7d403c0N[.]exe | Triage

Sharing

General

Target

c1f758af052245b5393eb56df7d403c0N.exe
Size

63KB
MD5

c1f758af052245b5393eb56df7d403c0
SHA1

6c50875595a9450c28a7a5355cd24ace85d00a85
SHA256

11c5c542f6eb7657df2a0896b61eab78f1c691679027b5eaf78c245935dcc654
SHA512

cf05cedbfeca3030e9089a0aa1ef80b4407c9259ce9207d42d37061872d085103313f24d5205e2d135aaa623de67e9cdd56cb586ee0dffa317f411552c63bd98
SSDEEP

1536:AOSJael9s7LDYWllUKT2d1mr0uSTEuO3CSF7UzNlFGzQOaeDHvE:YJaWOLMWlld2d1qyTEhV6NlAQQHc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1f758af052245b5393eb56df7d403c0N.exe

Files

c1f758af052245b5393eb56df7d403c0N.exe
.exe windows:4 windows x86 arch:x86

bafa3ec3354835722a317dda940c6138

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
GetSystemWindowsDirectoryW
GetConsoleOriginalTitleA
GetThreadPriority
LZSeek
RegisterWaitForInputIdle
RegQueryInfoKeyW
RemoveLocalAlternateComputerNameA
ZombifyActCtxWorker
SetThreadpoolTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE