000b5b0a5482729f3318c1f804aaf550N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000b5b0a5482729f3318c1f804aaf550N.exe
Size

31KB
MD5

000b5b0a5482729f3318c1f804aaf550
SHA1

c2d7c2ee9f87caffa65a941b2ab8783ea2cdb2e4
SHA256

ed2e945d59a6891ac29eb0cd95c0ce862df429c384442fdc24138f7c6180bb54
SHA512

d157b72f37683b4b714eb30ae0783d3df2b5d0fb82aebc6e3860ac7b9037071a16ae2c31c22bc6b52a6c1b23fd2ed168ea019a3237975cdee540959709a9c594
SSDEEP

384:2/3iGC2mrRNEGtmsXnZauYBxSMdcoTrSogBJudBWmm:2PitRNEGtXXnZ/JudB/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000b5b0a5482729f3318c1f804aaf550N.exe

Files

000b5b0a5482729f3318c1f804aaf550N.exe
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ