366262949241e937c863a62455e274a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

366262949241e937c863a62455e274a0N.exe
Size

34KB
MD5

366262949241e937c863a62455e274a0
SHA1

c4103590045f888459fc1da1d1734b6ca9d43246
SHA256

eed6ade1411cf69b9667b92bb1d1c83c1daa0863dc1805dc5882030f115e39f2
SHA512

36d1955a6a07ca57a57bacf75da3efe67d3cad42f8a46914eef8ad647ad77edaefde9f99438572cc61f12bd851247f472067e9ba6ea4bf6d248653dc06a9199c
SSDEEP

768:LZ+Zxe90i19C92eocaWTOD/86bspTlmC0:LaiZ19C92eocaWTO8ppQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
366262949241e937c863a62455e274a0N.exe

Files

366262949241e937c863a62455e274a0N.exe
.exe windows:4 windows x86 arch:x86

20e0010628f1fc5ba04633e130c6e90e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
GetWindowTextW
SetCapture
GetActiveWindow
IsChild
SendMessageA
MessageBoxA
DefWindowProcA
FlashWindowEx
LoadBitmapA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
GetKeyState
TranslateAcceleratorA
RegisterClassA
CreateWindowExA
GetDlgItemTextA

kernel32

HeapAlloc
HeapCreate
CloseHandle
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ