000cd4289ab53059e9fb071fd710ff90N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000cd4289ab53059e9fb071fd710ff90N.exe
Size

74KB
MD5

000cd4289ab53059e9fb071fd710ff90
SHA1

ea8ed54487b5d452a4b6468c536db1e886a61cc0
SHA256

29bddf7200887233cae48a1018ef01dca5b3734d849951f0c182d9ac2666730a
SHA512

e9af2f6e215c07678e964fe33aaa7a9da43c4550fb875bca81ea5d4153651fd6effeebee1357e20ab155c4469824c62d2c923b53f03b2122f5e5baffa1c107c6
SSDEEP

1536:dBtf/6gpcD8ovedqckjJ7/xVzyXjpzmq2c7pR7ezATNZlUU:dD6GcD8Fd7khxVz4Bz28oATTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000cd4289ab53059e9fb071fd710ff90N.exe

Files

000cd4289ab53059e9fb071fd710ff90N.exe
.exe windows:5 windows x86 arch:x86

7418871bfa5c9fdba56b024156c615d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetLastError
lstrcpyA
FindAtomA
GetVersion
GetLocalTime
CloseHandle
WriteFile
CreateFileA
GetSystemTime
GetTickCount
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetTempPathA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetCaretPos
ClientToScreen
GetWindowRect
wsprintfA
IsWindowVisible
InflateRect
GetCursorPos
EqualRect
GetFocus

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE