e689c7f2d72426442b4ef47a9680aec0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e689c7f2d72426442b4ef47a9680aec0N.exe
Size

234KB
MD5

e689c7f2d72426442b4ef47a9680aec0
SHA1

683f2087951d947e81b0877fc5f1d8a6609d63d9
SHA256

0fe0fa025d3da50ebb1291c30d2e684fbdf0a5eadf649234cf1b9363f5b4f73a
SHA512

3bc0ca551dce3aa3e9338a2e186b6563d8297a3aef6d4d88c60a5dd64643fa165b8e58b07dac1045af36515baf013597b54257099077675c20fdd727f25ecb5b
SSDEEP

6144:IL7TZjUiog1sc0dBzPwVLqIV9ZCyoyzFUk3Ka9mQcF5/UZ:IL7ljUiN1uF49qAPtH7h9mQcF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e689c7f2d72426442b4ef47a9680aec0N.exe

Files

e689c7f2d72426442b4ef47a9680aec0N.exe
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE