4ddf0372f5802cd675b7a36a4f236e80N[.]exe | Triage

Sharing

General

Target

4ddf0372f5802cd675b7a36a4f236e80N.exe
Size

1.2MB
MD5

4ddf0372f5802cd675b7a36a4f236e80
SHA1

e4f125ae808d53ae60529595adb19d129c26bb9d
SHA256

51f190f9d76ff3eaa719a8d8e9adb4065faea64d6d53be0f33e98baea8c930f5
SHA512

17ead3ba29159f7ae7a54f072abd496bf2da7b9fab951d4a1218040552061af1cbc8d9fbffe283efafb5d533bdc80cb9ac76b6f7933d0d5021dff8a661c2443d
SSDEEP

24576:H0OtsTfvLAFvB2RSTIz8VNUGhmvGGxGPVsI51HCZoEp38rbEmF2:UO6ADTIwCQs2BHCJ8r7F2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddf0372f5802cd675b7a36a4f236e80N.exe

Files

4ddf0372f5802cd675b7a36a4f236e80N.exe
.exe windows:4 windows x86 arch:x86

dbdb0525986cb60465f8680544bd9d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE