da675baef25723211e5fe9910987bee0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da675baef25723211e5fe9910987bee0N.exe
Size

234KB
MD5

da675baef25723211e5fe9910987bee0
SHA1

a588fefc6ad78a7ae742de38a188b0067b89a468
SHA256

8a38d0794ce058fdbb7b2da9debfc0c62c72484ea5a06d4e9ea306ffed20934d
SHA512

b80b3c165e3b8ca2eec7c0f964d4ed6861bb6577aeaed8336fe966f44f7b9c4e213165a903f8c17bf44a7d5c810e02c9fcc7493dc8c03bcb41d16cbde16855e8
SSDEEP

6144:iBnmc0LrYnaWtS14Nmv/mJSx39pIxVoi6JMOv9EMApi:iBSUT1Nmv/HOmMOSMgi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da675baef25723211e5fe9910987bee0N.exe

Files

da675baef25723211e5fe9910987bee0N.exe
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE