169e686044c5f9756412cc2aed89e6c0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

169e686044c5f9756412cc2aed89e6c0N.exe
Size

46KB
MD5

169e686044c5f9756412cc2aed89e6c0
SHA1

ef750df1a6d88ac498fd2b7fe3f41c8182452f5e
SHA256

9085e58d836bf829ae6ad556887f92c6fa8d247771f05a9884463928d8721adf
SHA512

aca15a8e5ac8d0fdcce31a295512130e9d74c9c0e224584814ffaa4f9d0e752b27ea80163cd55436cf4c38f5004bd54adb7ba9619f4e4658ff05ff2527482ca5
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhG:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169e686044c5f9756412cc2aed89e6c0N.exe

Files

169e686044c5f9756412cc2aed89e6c0N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE