da7ed0af511a71d0020f5e9d392bd140N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da7ed0af511a71d0020f5e9d392bd140N.exe
Size

496KB
MD5

da7ed0af511a71d0020f5e9d392bd140
SHA1

ed9fbd74c90a7d14cabf4698439b2ff70f6af76a
SHA256

ac87a859b81ba86e88ebc66699f8788ccf15d06bb851d047294f22a2fe0e2bbb
SHA512

b1ce5f5ec88fa971611a4b30cf8caa9a6b49da59c69981e4ca573bd152aadb0adf4da30970049c977cd5cf0d16accae8d86c28f3398dd5d78cadf901954afc82
SSDEEP

768:PDFz1Pd8BMMog+1r5SOqFiI+xx9yZMjCpA:PDPyMMob1dZzEW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da7ed0af511a71d0020f5e9d392bd140N.exe

Files

da7ed0af511a71d0020f5e9d392bd140N.exe
.exe windows:4 windows x64 arch:x64

e2cf8a2d37abcfbea7df69b5d2b66863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindClose
FindFirstFileA
FreeConsole
GetProcessHeap
GetSystemFirmwareTable
GetVersionExA
HeapAlloc
HeapFree
ReadFile
WaitForSingleObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE