4167253bb26a9de2d404bc080eb66b90N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4167253bb26a9de2d404bc080eb66b90N.exe
Size

66KB
MD5

4167253bb26a9de2d404bc080eb66b90
SHA1

42c852e9e01f8db0033fce10190026b2cbc1e960
SHA256

ad7dc523fff68b6706b4dd74c33c2821ccf6bcbc41505f1b84062bbb1f631ca8
SHA512

30f29e91732dcafcec6d450e964204422179f67fb23417548bcac6580520d0b99292090381f99664fcd3da9aae338218c6ce82869dd3c13a4a63ae7e4091736a
SSDEEP

1536:51d94NMTCokYBRHkCcd+ECh49dtfiM2acrjdx9L:b4NMXpY1fNYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4167253bb26a9de2d404bc080eb66b90N.exe

Files

4167253bb26a9de2d404bc080eb66b90N.exe
.exe windows:4 windows x86 arch:x86

ddc145c2a2df6f16adf0c794f499c17f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WerRegisterMemoryBlockWorker
IsBadStringPtrW
EnumSystemGeoNames
Sleep
QueryUnbiasedInterruptTime
OpenPackageInfoByFullName
IsBadCodePtr
SetConsoleInputExeNameA
GetCalendarDateFormat
GetConsoleDisplayMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE