2934381048b2f966b308896d6edb5120N[.]exe | Triage

Sharing

General

Target

2934381048b2f966b308896d6edb5120N.exe
Size

184KB
MD5

2934381048b2f966b308896d6edb5120
SHA1

d1b395fdea018b16c9892e08dc1676f29d88ddfd
SHA256

8124532b9d115a47b663cb1af48995586d5e4543732a51ca681d03e77032a8d0
SHA512

4a16fb125523049bf6417ef3ca5e363c8ac154df364892384fa95b4dc10e0344a5e782f5218142bdef161daf7c17327d9ec1e856699b480c82a270a735e2bd4b
SSDEEP

3072:7uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Kalmsb:57TXYsd9SkONU1jKGl5lm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2934381048b2f966b308896d6edb5120N.exe

Files

2934381048b2f966b308896d6edb5120N.exe
.dll windows:5 windows x86 arch:x86

dce27a370a9ee34c33d67042f8910974

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegisterEventSourceW
RegOverridePredefKey

gdi32

GetFontData

msvcrt

memset

oleaut32

VarBstrFromDec

kernel32

GetModuleHandleW
GetModuleFileNameA
LoadLibraryExA

user32

ShowOwnedPopups

Exports

Exports

FWroeeWqoinnmw

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ