4b089f0ed578e864141a73c1b909cf30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b089f0ed578e864141a73c1b909cf30N.exe
Size

70KB
MD5

4b089f0ed578e864141a73c1b909cf30
SHA1

d1661fd91a03bedb69e605aaaf695b65da79a874
SHA256

51b3b379be5dcb8aa71ebeedb71d23540ca0f0f5747c733c88c279097d578e0c
SHA512

391318c0eb77e2765a0cc93155010a94e7c044348766c07a0353fbef126159eb5c3647faf821b557f385e1c6b5f95434fb18ecc2244c44499943672c126e55a0
SSDEEP

1536:xWLw62p7KTxU0IIxhVu2d7mN9msbqt36z3b:lgTJxq2d7e9a03b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b089f0ed578e864141a73c1b909cf30N.exe

Files

4b089f0ed578e864141a73c1b909cf30N.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE