0d9b4a752b4633f8a81226852d18aa80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d9b4a752b4633f8a81226852d18aa80N.exe
Size

68KB
MD5

0d9b4a752b4633f8a81226852d18aa80
SHA1

5922f3aca738b047b600fafba3b629a2c0488dcb
SHA256

8d9446f7ed641fe58da441da4285084e60b31c3899d69bcc4fc3f877afe38521
SHA512

88f3da91da14ee3dd497f8c45a8ab5e087e2d63da95a1482ae8a6c7707f227bc82301564191185e80d6f28dc3817a77556a1d451aebe700567db3f5b05061c3d
SSDEEP

1536:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsryrEgxSSg:mq/5jMIPtdgI2MyzNORQtOflIwoHNV2r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9b4a752b4633f8a81226852d18aa80N.exe

Files

0d9b4a752b4633f8a81226852d18aa80N.exe
.exe windows:5 windows x86 arch:x86

a3e8b5e80d5f9f266119a4ac18211954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
TranslateMessage
LoadCursorA
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FillRect
GetWindowRect
KillTimer
SetWindowPos
BeginPaint
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ