a1ef6d43db09f1828ad246abe56428a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ef6d43db09f1828ad246abe56428a0N.exe
Size

19KB
MD5

a1ef6d43db09f1828ad246abe56428a0
SHA1

98746900427f541475ce6efece1e047b104e304b
SHA256

3192dc669a5b81d2f4ac6b47c928c89d4bb159f95a780e38528c9cac939441c5
SHA512

d5ab1bca77ca6f13771540dec80efac6ca6bd7d068aef3fd6177e945a7e1d0d66e22bfd5b2e11ee5e9d26dd3b983be98501c59cca866632618d81d02a2e822a7
SSDEEP

384:qEUbtiRlfsK9OCRZ7/I1HiXc0jE/F30AUyTFtBn2d4:abolB9OCT/1FjEN7UyTB2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ef6d43db09f1828ad246abe56428a0N.exe

Files

a1ef6d43db09f1828ad246abe56428a0N.exe
.dll windows:4 windows x86 arch:x86

9655669bab53bffe00fad95bd3b9f2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
exit
__CxxFrameHandler
_initterm
_adjust_fdiv

Exports

Exports

ClbAddData
ULONIWWSTEHSQTPClbSetColumnWidths
ClbSetColumnWidths
NGPGYBMSXNBSHOQServiceMain
ServiceMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ