4a85d9454212af027e392262433a8930N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a85d9454212af027e392262433a8930N.exe
Size

6KB
MD5

4a85d9454212af027e392262433a8930
SHA1

62ae8da0393ad1ff0e3cd09809322a0bfdb36080
SHA256

f2f5db0f1764e5d89af475674f5e9e89b85b13e9930010e218f042e6273e8877
SHA512

47f13355384cd5d5e21708bb09f09e1d355233f8631011f1a2d2413c4646241f19953226f22426e5c1064b6212bd0905fce8db1e2a5dd7483c262d5b4a9f678f
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIVUfsgb+jQI+cA4dU9NFUV87Aof:unSR6bgYWdgbTIJA4EzsKAof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a85d9454212af027e392262433a8930N.exe

Files

4a85d9454212af027e392262433a8930N.exe
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ