85b8b93ae8764918856c4cf7f1231e60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85b8b93ae8764918856c4cf7f1231e60N.exe
Size

3KB
MD5

85b8b93ae8764918856c4cf7f1231e60
SHA1

b43b422dbbecbfee4c6089635a0782546cab3060
SHA256

097a7b2d9344a24efaf07b866466d4713cbd4422408180280333ea3cbc28d9b8
SHA512

902e25483d1f93c86eb395d00861b95f0f1ef03441d44df1c37a04901be7ae4eb26d1fd2b3a0ba8841e672f8a1d3fa9ade9ec444af18766b6a8e0b9fb6fd77c6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b8b93ae8764918856c4cf7f1231e60N.exe

Files

85b8b93ae8764918856c4cf7f1231e60N.exe
.exe windows:4 windows x86 arch:x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ