344ccb4de1f61a99d691bc38c7831fb0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

344ccb4de1f61a99d691bc38c7831fb0N.exe
Size

611KB
MD5

344ccb4de1f61a99d691bc38c7831fb0
SHA1

511d94042b1068df72b07e76f0bc63c8a91e3819
SHA256

e6ab51f16690088f76e01aa14338a4ba321eb848b0a2c402356dd8b087cd6471
SHA512

936241556e9f8cc8751fc96edd2b38b9c7b0fcdce3fa6c5d97b25efbea684ed6bf68a169f2da275d2b0c48d8d32c1209780eb7a96384c9a125f6c83adbefaeec
SSDEEP

12288:mF2aCCD2l/KPJTTndr0yjgi43uDQ0LN9sJG50ZTbosxtdzuWVJNoBU2:bi5z0uDQ0LNqUCMktd6oNo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
344ccb4de1f61a99d691bc38c7831fb0N.exe

Files

344ccb4de1f61a99d691bc38c7831fb0N.exe
.exe windows:4 windows x86 arch:x86

9a264b55631c8bf07f910bd3c9f65f97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberFormatW
GetProcessHeap

ws2_32

WSAInstallServiceClassA

ntdll

RtlEqualDomainName

user32

GetDoubleClickTime

Sections

.text
Size: 604KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE