051c649468e4dfc49ddde6e5108f13a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

051c649468e4dfc49ddde6e5108f13a0N.exe
Size

316KB
MD5

051c649468e4dfc49ddde6e5108f13a0
SHA1

26cca5635a60a1caf31d25c42bf1cc452f527aee
SHA256

f33a4a06170b114322b361711ff933c3a5e858c98238a70e79a958f8fc18a466
SHA512

b30b3ffc2428588dd4826e9aa0fa130c422860b90531aa73f46ba914314b4e1cbfe1c5763012fea449f91a5428a880d4f35f047f4a817fdb72dc7436d773074a
SSDEEP

6144:Ru9FQ7867saFPJf3p2hjzM0hsf3e7nq87YvRC8BjVbdYC3u5SzKQNVzFqUsGczst:mY9saFPhpd0hsfOjqjkEjRy9Qfzzc4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
051c649468e4dfc49ddde6e5108f13a0N.exe

Files

051c649468e4dfc49ddde6e5108f13a0N.exe
.dll windows:4 windows x86 arch:x86

dbca5d324ec49b89414af308d3b9afbd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

mfc42

ord5356

msvcrt

strcspn

kernel32

MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

wsprintfA

advapi32

LookupPrivilegeValueA

ws2_32

socket

shlwapi

PathIsDirectoryA

ole32

CoSetProxyBlanket

oleaut32

SafeArrayUnaccessData

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

Exports

Exports

InputFile
PrintFile
WriteErrorLog

Sections

.text
Size: 295KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE