fdc68ca14a282275fb117e04a9c38a30N[.]exe | Triage

Sharing

General

Target

fdc68ca14a282275fb117e04a9c38a30N.exe
Size

184KB
MD5

fdc68ca14a282275fb117e04a9c38a30
SHA1

dfc6570c55d7cbc7dad22b93ec8f67260d633ea5
SHA256

28153796a530cc6e4b152af299324c9408571a20f639de932ec1f776d3f0e5af
SHA512

7b3e3d2736d7fc75b628f791c6b71109f9cd45c3799c3070b3b20d875bb6e35d659e4d27387bdc45617bc0c38f80538f5b1a2cc5e23845f8de55791aaa999d03
SSDEEP

3072:9W8WgWhVnmr6k/6zsRJLNqTXvMU9tb+/HU6ngmyWx9ixCH0u:48qh+66QsRdNiBW/06ngmyWexC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
fdc68ca14a282275fb117e04a9c38a30N.exe

Files

fdc68ca14a282275fb117e04a9c38a30N.exe
.dll windows:5 windows x86 arch:x86

eacc1eddf059a6097fd8d34c586d3907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey
RegisterEventSourceW

user32

ShowOwnedPopups

msvcrt

memset

oleaut32

VarBstrFromDec

gdi32

GetFontData

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA

Exports

Exports

FWroeeWqoinnmw

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ