3508349dd81669ebe8b1978a30d6d830N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3508349dd81669ebe8b1978a30d6d830N.exe
Size

23KB
MD5

3508349dd81669ebe8b1978a30d6d830
SHA1

d31c3b47c9f670959aea5e08c50b553ead1642d3
SHA256

cc8f3886ceb0156a240633a85765283c55d71ce0336a3e2c52647b160cc3bd23
SHA512

b3e3f9c918d2b1ec84b244c5d0f3afc35dc342739f804a150f6ef4083a8f271f3453e0ec3098051b3a7f50a54747b128357b376d496a79af8cc7cb46907ae00a
SSDEEP

384:BkSnmQgodRN5iqEDvTwFVm91kChhEMorflzDaVbJCDHN:nnfgoDziqWrwTg0DrflzDEiN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3508349dd81669ebe8b1978a30d6d830N.exe

Files

3508349dd81669ebe8b1978a30d6d830N.exe
.exe windows:5 windows x86 arch:x86

12f6927fb707c45d58f6a2f7b02ce76d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
GetDlgItem
EndDialog
CreateCursor
DialogBoxParamA
SendMessageA
MessageBoxA
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
PostMessageA
DestroyMenu

kernel32

GetModuleHandleA
CloseHandle
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ