9c7422788176586e106bfdf3b237d650N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c7422788176586e106bfdf3b237d650N.exe
Size

51KB
MD5

9c7422788176586e106bfdf3b237d650
SHA1

0e266dc40ea9760cdc01f36d1a6a26d9802d9c49
SHA256

6a26e636e183a97f2ea866059a8794fc3d631d868fe0de53a5b093ffa8211f5e
SHA512

8eb8450bcfd7911f64418c9983bb8f0e43618007b35e5774fc6ee32b1168760921aa0c62ec5ec33b57a3923ac9d834c9ef8d288079f0b5b78461a35d145a4456
SSDEEP

768:2PitRNEGtXXnZ/JudBDtcUtdVCxVOS3fNGq5xgBq:RF3wDtkx3P5xt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c7422788176586e106bfdf3b237d650N.exe

Files

9c7422788176586e106bfdf3b237d650N.exe
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ