001aca535d064915091cd9c13a0e3980N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001aca535d064915091cd9c13a0e3980N.exe
Size

63KB
MD5

001aca535d064915091cd9c13a0e3980
SHA1

b8cd1df1952c653cbfc67f1ac9be23b0d069e56d
SHA256

4bed6d72b4bd5ef4206c7403b72affb26cbafab5a057c1020451bbd5eef69ebd
SHA512

846ea6e96c08a271b3827a5565243b5654a2e1f45f97dab490ae75d7b0f59a77298d02db067b3eb7ea01e4d5a49aea97c2440df67928cad631b60d97eaf67f2b
SSDEEP

768:4sNgDgDplf5otRX0Qt+eBn6BhSsPBrCV1pvTyqXiCS3HQZ:ZlmLJt+sn6Bos8RTBmwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001aca535d064915091cd9c13a0e3980N.exe

Files

001aca535d064915091cd9c13a0e3980N.exe
.exe windows:4 windows x86 arch:x86

552cb014ac3a1d61bbb8df7d7ed466e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrlenA
EnumCalendarInfoA
GetStartupInfoA

user32

OpenIcon

gdi32

CreatePen
CombineRgn

comdlg32

ChooseFontA

advapi32

CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDecrypt
CryptAcquireContextA

msvcrt

__p__commode
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ