1240ab0d83ab5761c83411db75985db0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1240ab0d83ab5761c83411db75985db0N.exe
Size

63KB
MD5

1240ab0d83ab5761c83411db75985db0
SHA1

452f0855a1ef392dd33587936890e11d756c55e4
SHA256

3c378137681e831354e523241c81dcbd6644b22b1a4a3dd6c5166694f016816a
SHA512

2590bac8b664072b840810a977a4a61437a3992a39ca9fd67400124677609fdacca1fb6aee3d9bf4cfe10de427ffe26e44c35057f2bba74beb844020156d5ef6
SSDEEP

1536:oPMJ6AtVasDGDQ8+hjSqfx2Lfa5YR18wdGcQtVtb/3f0U:a4tssDGM8+dSsA+YX8wdG9t4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1240ab0d83ab5761c83411db75985db0N.exe

Files

1240ab0d83ab5761c83411db75985db0N.exe
.exe windows:4 windows x86 arch:x86

7b532b3ba1b30f85fc948c09e8bfdf7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileW
ContinueDebugEvent
FreeLibraryWhenCallbackReturns
GetLargePageMinimum
ReadConsoleOutputCharacterA
FillConsoleOutputCharacterA
ZombifyActCtxWorker
SetConsoleNumberOfCommandsW
BackupWrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE