7f2ec23cd46be92642394b94d82ce120N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f2ec23cd46be92642394b94d82ce120N.exe
Size

366KB
MD5

7f2ec23cd46be92642394b94d82ce120
SHA1

a1e2b1119653002332b4b1fc45672f7ca91cac2f
SHA256

841398dd01190d5bab4503fac842a6acfb9753603e5aabef74578aa7f2df47e8
SHA512

505189d30d64b82d02e6dcd1df6abad81c9f24c4b19794da6056b1895b4b7484da38287ac77cf56c9b737f01b56b9d815ce998c5f2f38664b79284d7cc5bb2e3
SSDEEP

6144:caQbjyYHO1H7CmMJg+ewrvZLNZbt5kT7GynSrCj6xamBuCdibJI0hWuU4ZomCQh/:cT5Ow5k/5nSrCjWZdCsuiK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f2ec23cd46be92642394b94d82ce120N.exe

Files

7f2ec23cd46be92642394b94d82ce120N.exe
.exe windows:4 windows x86 arch:x86

de6c7cb6a3205debfc6ae490248ff623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
QueryPerformanceCounter
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE