00285972b459c9d39e67bb000e4e5160N[.]exe | Triage

Sharing

General

Target

00285972b459c9d39e67bb000e4e5160N.exe
Size

30KB
MD5

00285972b459c9d39e67bb000e4e5160
SHA1

4b9969efbd2a66e2029132fe0f84fe9969ac563a
SHA256

37d71bc75e70e467047a2d0982ae485198e42cec0b71ba1841573b61f60c184b
SHA512

52d85798d87510dad8f98227eadfd4c30f4c8c29ac6e6f1a26b00c2fcfe0016d4b583164f413b920d1ae410862189f2c1833d7cb92f9ae2736658fc5c1f5199f
SSDEEP

768:wM8warA8Iw5ND9QHselhTMqycxK83xEHFAbbIoBzka7B7jBSzQyEaMXd:w3rVIwHCMelhT71R+FAAoBzpXBSzQjDN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00285972b459c9d39e67bb000e4e5160N.exe

Files

00285972b459c9d39e67bb000e4e5160N.exe
.exe windows:4 windows x86 arch:x86

d63c6a28de3d0b79b157bdcac74d8efb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
Sleep
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
lstrcatA
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

msvcrt

_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_exit
_c_exit

Sections

.data
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE