7bfbfebd38abdb2b03f9c503108db140N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bfbfebd38abdb2b03f9c503108db140N.exe
Size

5KB
MD5

7bfbfebd38abdb2b03f9c503108db140
SHA1

1bf2ac997862987795d163b5ba4eaef93d0253e6
SHA256

f056f3aa58405e67edc36cffc5435b427f2e560ad288eb60a1c6ceeba84268be
SHA512

cb86ade6ee70ec379c1393f1691e61ad94d348bed330c1046f2a272902dbd95eaa1f1b1c30e99e5aaf01abfe95c81cc52c332b3ab2f3aedc9ce4ab367114f99b
SSDEEP

96:hy859x0P8MaLmGblYkAskkPgCk+zKYtOH6Hok6VJuDjjIydl+b9sSYY:F5oLKmGrhg+zZOH3JWP0b9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bfbfebd38abdb2b03f9c503108db140N.exe

Files

7bfbfebd38abdb2b03f9c503108db140N.exe
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ