1dc64fdb493dacc3fcf49252b52fd290N[.]exe | Triage

Sharing

General

Target

1dc64fdb493dacc3fcf49252b52fd290N.exe
Size

32KB
MD5

1dc64fdb493dacc3fcf49252b52fd290
SHA1

2d04ca968e74ba32381b9e6bf9f1c60aa2dbed48
SHA256

75b22fbcfcb56849b0335bc4720890e21bdf412640c179a1002adcabc4746fb7
SHA512

9deb65d01ccd236026b6424f1e200ea48437d14c5c923aee2436e33053f32c56ad97c9bff76524cdd639a69c62b48542519efbd199455acb10f34d4d0acdd118
SSDEEP

768:JGuCm58rGBcAt6RlUgIzVPEm1XFa7Cwu:NmCBcAARlIzVU9u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dc64fdb493dacc3fcf49252b52fd290N.exe

Files

1dc64fdb493dacc3fcf49252b52fd290N.exe
.exe windows:4 windows x86 arch:x86

51584a2ae0d3529daf101310334e90bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetUnhandledExceptionFilter
ExitProcess
GetModuleHandleA
GetProcAddress
FreeConsole
AddAtomA
FindAtomA
GetAtomNameA
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE