a91021c423323b1d34d4a7bab67fcc60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a91021c423323b1d34d4a7bab67fcc60N.exe
Size

6KB
MD5

a91021c423323b1d34d4a7bab67fcc60
SHA1

f030485c20c6f0780c1439c8b1d33d6fc8d0306e
SHA256

d74a8b67ea883230c8c126786283298470f38baed47187d4d35e2ede325e5d41
SHA512

b5bf669f01b4a07b86d0a0ff9e2dde225f49157be3a5afff2064b5f508ca957dff2b993734956179feec12f82d89a2a2dcf2684c34be73e9d7778e68d2c036bb
SSDEEP

96:hy859x0P8Mawc1F76bh2Gm7bCYCxiahCZ8Au2lqUKehGLaFszk:F5oLK+bY7bCYCxi8ntehGWFW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a91021c423323b1d34d4a7bab67fcc60N.exe

Files

a91021c423323b1d34d4a7bab67fcc60N.exe
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ