2872dd562a5f18c0be4f741846c3ee80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2872dd562a5f18c0be4f741846c3ee80N.exe
Size

27KB
MD5

2872dd562a5f18c0be4f741846c3ee80
SHA1

95e5aea69d51de12a694c0962049289b507f1df3
SHA256

584f3e416c1909ab87ec659d13942ef54c804663d7f75a5e3136822c3ec2054f
SHA512

8949104e813ea222335db4758ec7901cb2269ec84e5e983ad9ba45192377c666076d6a430054813b25e96a58e2d66dbabef2f6dc9ef6c13d35547d0491f1d905
SSDEEP

192:FBEcvnwR2kBAxKYqDL55B36sFpmA/1Qlq02pjZP22S7nvAZSixBpSY5nlaLT189D:csnwR2kBAqPh31Fp5yBkPGvKpSYATg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2872dd562a5f18c0be4f741846c3ee80N.exe

Files

2872dd562a5f18c0be4f741846c3ee80N.exe
.exe windows:5 windows x86 arch:x86

e836076a09dba03e4d6faa46dda0fefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpSendRequestW
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetConnectW
InternetOpenW

kernel32

GetTempPathW
GetFileSize
GetCurrentDirectoryW
DeleteFileW
CloseHandle
WriteFile
lstrcmpW
ReadFile
GetModuleHandleW
ExitProcess
HeapCreate
HeapAlloc
GetModuleFileNameW
CreateFileW
lstrlenW

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ