b9c21e2b601de6a33eb58afa20f15940N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c21e2b601de6a33eb58afa20f15940N.exe
Size

49KB
MD5

b9c21e2b601de6a33eb58afa20f15940
SHA1

5b999e9c755607254b3b1d33a6013af92ff814d8
SHA256

0271c669fec81dc38810829c66d39579fca73dd33039e59ca170aacb72468fb3
SHA512

1f655c5f56ee17d97dbec238b172a8344fcb088f4356e338a5b2daf05ed53c2ef4e3f35be47b762beba95ece88d792ac856357da3979465e3e7afadf6c91f743
SSDEEP

768:ErzqzutynTIwtTVZ4mlK6apvtXBkTrTUDXTiUSW1TfBwp:EvyMwtRamlK6apvtavYDXTiRW1TWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c21e2b601de6a33eb58afa20f15940N.exe

Files

b9c21e2b601de6a33eb58afa20f15940N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE