5e9b7b28fc7fe5cb60ec8e39c4710b50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e9b7b28fc7fe5cb60ec8e39c4710b50N.exe
Size

63KB
MD5

5e9b7b28fc7fe5cb60ec8e39c4710b50
SHA1

9b0ef2958640ea8d6d6dfdc6840259c279fb09b2
SHA256

1f4fd9b4d9f2ed09545d5c34d6203797c3698eb90a535764408ae53525708668
SHA512

461a2c7079150c4fe64d3cf17095078c9d9e023a06f11bcc1b99962f079bf92115df107f8b8c870cdda40c2783f057037ff9d1f3fa2d8cf3442e299ebcf3670f
SSDEEP

1536:4aT7BclB2zdJtU2UzJaHOaPw3NCAlOk9DzuvTccO:nBcrKd4yPwdCG1Dzmgt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e9b7b28fc7fe5cb60ec8e39c4710b50N.exe

Files

5e9b7b28fc7fe5cb60ec8e39c4710b50N.exe
.exe windows:4 windows x86 arch:x86

bdd7d9c0626aab4ddeb92ebdc83dc172

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeLabelW
GetProductInfo
BaseUpdateAppcompatCacheWorker
GetConsoleAliasExesLengthW
WerpLaunchAeDebug
SetComputerNameEx2W
GetConsoleHistoryInfo
BeginUpdateResourceA
GetLogicalDriveStringsA
SetProcessDefaultCpuSets

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE