7cce0a3c9784f11200604fa2874e0b60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cce0a3c9784f11200604fa2874e0b60N.exe
Size

120KB
MD5

7cce0a3c9784f11200604fa2874e0b60
SHA1

156aa243a238e4506db0a7a56f00c11f695bb96b
SHA256

94c1d0ce237b4f57c0836d3b938eba3524ec176fccc008996daf1c2a241471a8
SHA512

eaf29d2b785036d2e5cf6931eaa01f2a2b7630cd168486d47accc9859366220bf4d209dd0f94d58a762ad97edc74501274b825c66e14bc828ffb7044d89a8059
SSDEEP

3072:ueTKbDgCosHfj3QalWeU3/496YOksrC/1D:uciDgC3QaAeL9ThTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cce0a3c9784f11200604fa2874e0b60N.exe

Files

7cce0a3c9784f11200604fa2874e0b60N.exe
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ