aab45b8f6823fe032a5751ce08a11830N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aab45b8f6823fe032a5751ce08a11830N.exe
Size

23KB
MD5

aab45b8f6823fe032a5751ce08a11830
SHA1

a052313f0cf13357c2339cfbc09042c82570d305
SHA256

dd43040e6b7e807d7a30c74a28e4378ae07b5b71fc4e410785af0dd53cddac61
SHA512

1c3434412e31e798e8ababdb4178f4dbb309398992e318686c9ca8ed684a182f7ef2583a831102f1b53f343b5a2b3235af71f4075cddc431d759c6f4283f4906
SSDEEP

384:UxHCVYNGUfAtdgI2MyzNORCFtOflIwo59NV2XBFV72B4lA7ZsiyWV+t/wyfyQ2u:UxipUYtdgI2MyzNORQtOflIwoHNV2XBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aab45b8f6823fe032a5751ce08a11830N.exe

Files

aab45b8f6823fe032a5751ce08a11830N.exe
.exe windows:5 windows x86 arch:x86

688ad82d47fe4314040aa0041646c921

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdiplusStartup
GdipCreateFromHDC
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdipAlloc

kernel32

LoadLibraryA
HeapAlloc
lstrcatW
OutputDebugStringW
LoadLibraryW
GetCurrentProcess
FindResourceW
LoadResource
SizeofResource
LockResource
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
GetProcessHeap

user32

ReleaseDC
BeginPaint
GetDesktopWindow
EndPaint
wvsprintfW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ