a5f64752132264e4ef0d3c0526a3c580N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5f64752132264e4ef0d3c0526a3c580N.exe
Size

6KB
MD5

a5f64752132264e4ef0d3c0526a3c580
SHA1

1088415c1c2296cce317b5700c503801009d2fc0
SHA256

876e4fd531816c4faef712585d94e946fde6973f3e8db831862526e577f7124c
SHA512

19c3ef96e8ffa5414e02e35d4486a052c9defd8c0026d3895d75c936ae02811c34c6cb02f2c2258dc2e84088062339fb69103b72774c48a67ca32d174abe3b72
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIASaK9/7T973:unSR6bgYlAjx7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5f64752132264e4ef0d3c0526a3c580N.exe

Files

a5f64752132264e4ef0d3c0526a3c580N.exe
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ