482f62f3448f36042c499ec6b71ca180N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

482f62f3448f36042c499ec6b71ca180N.exe
Size

63KB
MD5

482f62f3448f36042c499ec6b71ca180
SHA1

3ea8445f1ee8b57c962ad99778b9363426e1692c
SHA256

c09be40348262cc741f174e4aa51d64e13602b11f7f6970a7a27b7016fcd58f4
SHA512

58d33583f14f0d9e8e24fde0e4d0f54b35d0165ffa799bdf37bb045ed0036523c4ccb457882a43db6dd6cd67c16d9ff81bc0893cc72c362f2e630ea9ccc4f99d
SSDEEP

1536:PLIdallxGMF19NHcpemT7doq2t7/IW37MJfotCH:DtlOOcTxj2x/JgJgG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
482f62f3448f36042c499ec6b71ca180N.exe

Files

482f62f3448f36042c499ec6b71ca180N.exe
.exe windows:4 windows x86 arch:x86

ecf6a9437792b3fdee73e843bce368cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ScrollConsoleScreenBufferA
EnumCalendarInfoW
ResolveLocaleName
lstrcat
CreateFileW
NeedCurrentDirectoryForExePathW
WerUnregisterCustomMetadata
GetDiskFreeSpaceExW
QueryThreadpoolStackInformation
SetTapeParameters

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE