1293837542d4aab3a6a21668c599fe80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1293837542d4aab3a6a21668c599fe80N.exe
Size

32KB
MD5

1293837542d4aab3a6a21668c599fe80
SHA1

803794f8dd0ecd9b906201d4ad10f3e30ddeca45
SHA256

a601301ac5cfef2f46da5b1cb205aa150b05a2d123cfc41cc8b6e40d71cf6f95
SHA512

6ef2f38d0f1cf802d94df23e5cb135ec8123fafc1a9913809b499ab1d483dbf1a0da7c776de96eb910243a22ea36f1f42e550e0b49bc9206e9cec9ce99c62a86
SSDEEP

384:uhLCP1R8XnzvuwT0pZwBeH7lQDizU11u54TV0L4S0w92F:cCcvuwU6eHhQDi41U4TGL10wgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1293837542d4aab3a6a21668c599fe80N.exe

Files

1293837542d4aab3a6a21668c599fe80N.exe
.exe windows:5 windows x86 arch:x86

0472c674d7267dab79104d29a2a3058b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

TlsFree
TlsSetValue
TlsGetValue
CreateFileA
TlsAlloc

gdi32

LineTo
MoveToEx

comctl32

ord17

shell32

DragQueryPoint
DragFinish
DragQueryFileA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ