4f954e1019b36faf1b15ff689703f8f0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f954e1019b36faf1b15ff689703f8f0N.exe
Size

604KB
MD5

4f954e1019b36faf1b15ff689703f8f0
SHA1

a524147623d9b453e858e0a851df22faa370a1d5
SHA256

91dd8096c9f76a0a3cda254e388d2a508605f77f92ddbceb46614e4fa51b6030
SHA512

f02d84a2574b9a5067fa5679141cf64848159ee06a3d52295c046ac0e1205e741aa126f1d752511962dd2ef71baf1bf5ec8c4aecb03d3cd92e2373a702ce43c1
SSDEEP

12288:I22E1Kkk82gSdcRijiYEHYrxMAiJ/kJVYhoHWh8eGekn/HckuNNXexH:I29hCDWYEH+7iJ/kJpHW6RN8xXex

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f954e1019b36faf1b15ff689703f8f0N.exe

Files

4f954e1019b36faf1b15ff689703f8f0N.exe
.exe windows:4 windows x86 arch:x86

aa54131a9c9b9a76c074dc44c0c97e39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgPropertyLengthAsVariant
CoCreateGuid

advapi32

BuildTrusteeWithObjectsAndNameA

kernel32

GetSystemDefaultUILanguage
GetCommandLineA

Sections

.text
Size: 601KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE