589da9552b4a3af5bf0e77150a87a530N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

589da9552b4a3af5bf0e77150a87a530N.exe
Size

41KB
MD5

589da9552b4a3af5bf0e77150a87a530
SHA1

758f1b05107de0990ed389e98fae7d66883234c9
SHA256

ee54abdfd07e4911e075fac8a6f5f2174373f52a3ce0839fe225031600a23f88
SHA512

bc85a6eccb423081011c33e38f109fbb048d20a98c571add3628e10831f943c7b8f405d8826433ca4199b6017afd40fc5c86e37e5da10d1e93874f43dfb23a91
SSDEEP

384:W37M9v2VRYCoy5H/rcAyjH1SvHae/yNXK/Whz3suV9d4lZO2uoAS2:WY8VRYY5HT5yjVIHNyNwQYaXapudS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
589da9552b4a3af5bf0e77150a87a530N.exe

Files

589da9552b4a3af5bf0e77150a87a530N.exe
.exe windows:1 windows x86 arch:x86

64e9084150010351c5f2f53555526080

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_exit
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter

user32

SendMessageA
GetLastActivePopup
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA

kernel32

lstrcpyA
LoadLibraryA
SetLastError
CreateFileW
lstrcatA
GetFileType
CloseHandle
GetFileSize
GetStartupInfoA
DeleteFileW
GetModuleHandleA

comctl32

InitCommonControlsEx

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ