51dc24427634cb03412d4e356f602c50N[.]exe | Triage

Sharing

General

Target

51dc24427634cb03412d4e356f602c50N.exe
Size

51KB
MD5

51dc24427634cb03412d4e356f602c50
SHA1

f9d687a04b2e61c7d7c2b32a189af67507f0c168
SHA256

6e45703c3e260b287f6e0f4d426fa260e5f3c1326c6e140421de404a9fdafbad
SHA512

66313f9a984bba6cb684d1d6c8bd95e19f54a35d1b97d105b65265fa2db779ded90d2eb5174deb8f96ec6bce72f6f004551f821120436d5d1cefc5f368b8fa71
SSDEEP

1536:0eqPjXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8VHfr050:jqPjXRrs9sINeZEtejlIkoLN127BFVn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51dc24427634cb03412d4e356f602c50N.exe

Files

51dc24427634cb03412d4e356f602c50N.exe
.exe windows:4 windows x86 arch:x86

7763b13757a016b5cb5406899f818c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

ReadFile
GetModuleHandleA
GetFileSize
CloseHandle
VirtualAlloc
CreateFileW
lstrcpyW
GetStartupInfoA

wintrust

WinVerifyTrust

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ