10ef7f0b5d092e73a4ebf9ddd8e4a820N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10ef7f0b5d092e73a4ebf9ddd8e4a820N.exe
Size

65KB
MD5

10ef7f0b5d092e73a4ebf9ddd8e4a820
SHA1

8570a48be2eac904e84be6ea21ef0e69dfc9aec5
SHA256

c8fcfc9a07077f603e26175939577b14ad3b8446df00d3c9efb8297c2a25afca
SHA512

395dc95c6ee13611f44d9a8c922825dd40758ba2a1e065d43102f987bc27d5d2dd66fab5b75729559a6871de2332f1e2c58fa19b11d9e775afa6c42963f16afa
SSDEEP

768:Erzce4ewyX6RNHHVo0nDiZnLGcxeeFKHY9Idmf1:E0h7ueHVJcycx/wm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10ef7f0b5d092e73a4ebf9ddd8e4a820N.exe

Files

10ef7f0b5d092e73a4ebf9ddd8e4a820N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE