9a7973c10ed2163af4c5168d3bbb4580N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a7973c10ed2163af4c5168d3bbb4580N.exe
Size

50KB
MD5

9a7973c10ed2163af4c5168d3bbb4580
SHA1

35dcf277e3e5fc89381f8be462c86c0c8cce1ea8
SHA256

0b34661a1f692f9edc55ac6ce2dec45bb577698841548d4c5b7db9f5fe727e6b
SHA512

a5d3f7244b938dd08cd5418a591cd458bef4d8b39c37b5c85e335cc77f1e59c419c20c334345d93af7d889d4630726ffb61df6b8a5880d3bad8205c961c50f79
SSDEEP

768:dD2oV2AJblQRNLzFrSNTVebqxjxMQhMk6CrpZFDB:dCoVXGRTuhBxj/hHVDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a7973c10ed2163af4c5168d3bbb4580N.exe

Files

9a7973c10ed2163af4c5168d3bbb4580N.exe
.exe windows:5 windows x86 arch:x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ