00058a87c7c9b13861010df5763fcb60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00058a87c7c9b13861010df5763fcb60N.exe
Size

80KB
MD5

00058a87c7c9b13861010df5763fcb60
SHA1

79ddce015ee88d5db73f8b42a19f8b3ab01c88b0
SHA256

1bfede869e09d2a8600b1ca82cc1c1703a797f293f1a204cfcbed32adcdbcbd5
SHA512

f1c8e8235fd69ac3fd93e3e61a2f6969c1afb9cb223c36fcb1642302671b3d99614856fe184cf91ade46139b8e0e38253317a531a065d19eb3ca8adeb045b621
SSDEEP

1536:EpuAIC+G5/zblmZgty4+t+4EpItl0RA2orQ:jG4Gy4+t+GLIo8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00058a87c7c9b13861010df5763fcb60N.exe

Files

00058a87c7c9b13861010df5763fcb60N.exe
.exe windows:4 windows x86 arch:x86

af3d646e2298f28219fc43fa588b746a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SetErrorMode
VirtualAlloc
GetProcAddress
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
GetModuleHandleA
HeapAlloc
GetOEMCP
GetACP
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetStringTypeW

user32

GetSystemMetrics

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ