aef88553e76f2bf391579eaec56d11a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aef88553e76f2bf391579eaec56d11a0N.exe
Size

917KB
MD5

aef88553e76f2bf391579eaec56d11a0
SHA1

d58e94420aca1ae58044c427de844b26fa159f63
SHA256

38405de782cf9520485135c089997304034522971a8d771cce2338c48798bd1b
SHA512

13e279d385db36538c90fb8731ce9e4b02beb35fa1040785fd230fc54dcb6150fb6b13e18b4f5f3d676fe5f36c0a0edabbf4c04f9ed12cbeec455c50b541e4e7
SSDEEP

12288:QcQgsubpguTV4qyO0GnP0XeclX/wLgBDG040J+wTez/Y1TnybWe9x7:QtubpXXyOvw47mv4dx7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aef88553e76f2bf391579eaec56d11a0N.exe

Files

aef88553e76f2bf391579eaec56d11a0N.exe
.exe windows:4 windows x86 arch:x86

84a63aea3ee01401c9dacf3a46f569a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
QueryPerformanceCounter
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE