11046b963f6990d543b7629cec223b80N[.]exe

General

Target

11046b963f6990d543b7629cec223b80N.exe
Size

24KB
MD5

11046b963f6990d543b7629cec223b80
SHA1

cab914769ef76b7af8ef8822240676fb18e3be76
SHA256

0a19dc364f757bc38d9fcfbf70499711ff2f45eccc5bb8ffff5eedfe34a6e331
SHA512

5122037dbae24d9cb20c34eb3029c958619050fb1ebd34dadd5a3722d78d4cd51f49ed2bcd834e62f989517ae839389d88031a0b02b61560582de6af7158f933
SSDEEP

192:ILimTi2zDd2pfNWUPoPKjlb8gmQ7dTwRujVdzPv:6pDd29cUPIKjlbmgdT8W3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11046b963f6990d543b7629cec223b80N.exe

Files

11046b963f6990d543b7629cec223b80N.exe
.exe windows:6 windows x86 arch:x86

00cca04c937e03e6e84009d15137fbab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\flort\Desktop\Homework\CIS Assembly\Florence_Tanimoto_S23_022_Lab_7\Debug\Florence_Tanimoto_S23_022_Lab_7.pdb

Imports

kernel32

CloseHandle
CreateFileA
FormatMessageA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetLocalTime
GetStdHandle
GetSystemTime
LocalFree
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadFile
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
Sleep
SystemTimeToFileTime
WriteConsoleA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
WriteFile

user32

MessageBoxA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00cca04c937e03e6e84009d15137fbab

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 1024B - Virtual size: 776B

.data Size: 3KB - Virtual size: 3KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 724B

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 1024B - Virtual size: 776B

.data
Size: 3KB - Virtual size: 3KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 724B