ab458c1895bfc915d8fe8b71bb670140N[.]exe | Triage

Sharing

General

Target

ab458c1895bfc915d8fe8b71bb670140N.exe
Size

184KB
MD5

ab458c1895bfc915d8fe8b71bb670140
SHA1

b8ba186c9146cfd1bc9f7d841ffa9c4297c88704
SHA256

2975d6a4d0462ab6d562c2dc01b8c3aaa12f93b953b9395ee6022a53b7670798
SHA512

c6661548045f68966da86e43bc3a45ebb735ae1004816d090d271f8401d8788a822b2d1d4426fe1d231c9828ea18db80ebedd74c86941f97a8ac606c0942b27b
SSDEEP

3072:092qSmHOhnWpPI1ybmJIiC00PArIojHTYVBCn+rs3Ss3qLMT/rLA:09NSMOEpQ1Q3ODAr+V3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab458c1895bfc915d8fe8b71bb670140N.exe

Files

ab458c1895bfc915d8fe8b71bb670140N.exe
.dll windows:5 windows x86 arch:x86

f684d1d1b2c4c4c5eddaa7c939270df0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset

oleaut32

VarBstrFromDec

user32

ShowOwnedPopups

kernel32

GetModuleFileNameA
LoadLibraryExA
GetModuleHandleW

advapi32

RegLoadAppKeyA
RegisterEventSourceW

gdi32

GetFontData

Exports

Exports

CcfZASHbgfDsbf

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ