001cb4b35f0d58e450f704a07c9779c0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001cb4b35f0d58e450f704a07c9779c0N.exe
Size

22KB
MD5

001cb4b35f0d58e450f704a07c9779c0
SHA1

b01990e1a4dce539181ce1b1f50284d80729d222
SHA256

f83d08bee57240a3397fccdf3fd4936bb487e6f9f6aa77c0864aaa0a9de762d7
SHA512

53241897aa61fab65c9a4c99c0a889d40dac0c9ea2e9a181f557f4377c9e24b30763ddb3570d133ac67649b65a0870a089c0d0931d0b99ec63aed3f169c58d3a
SSDEEP

384:pm1b13p0QDWR4xH9p/mkT8rrqlqZUYvO+1UdPwPXUop5e1:pm9dlWW9ef8kzvJPXUoPg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001cb4b35f0d58e450f704a07c9779c0N.exe

Files

001cb4b35f0d58e450f704a07c9779c0N.exe
.exe windows:4 windows x86 arch:x86

f1208a98c97cba6bc18c52ddb802bccb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetProperty

winmm

midiStreamRestart

winspool.drv

EndDocPrinter

msvbvm60

ord183
ord697
ord520
ord631
ord632
ord526
ord527
ord528
DllFunctionCall
ord563
ord675
ord601
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ