c1590959d5dd2cd4a78601c764a10620N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1590959d5dd2cd4a78601c764a10620N.exe
Size

6KB
MD5

c1590959d5dd2cd4a78601c764a10620
SHA1

27a4fc406f0383c504246a942c35f51ad5c85fce
SHA256

93f935aef484cb10ba1efe2591e7c39288f7a782c7de7fb2f0bb994fd4f106e1
SHA512

38d99be86989451a6a32081d598993065fa4e55ad321ecd51483bba89256dd596978c502a15f3550af268c8e57e50d63efb90cb333f00640e660a8ac6bb18ffd
SSDEEP

96:nEY2RrF1eqwi4S3sm+enHGgXxkgAXZQv/HjkIMCgAaKjz:EHRh1eppS8mmnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1590959d5dd2cd4a78601c764a10620N.exe

Files

c1590959d5dd2cd4a78601c764a10620N.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ