215bcd2d4cdaddd9dd403ccb99cfff80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

215bcd2d4cdaddd9dd403ccb99cfff80N.exe
Size

2.0MB
MD5

215bcd2d4cdaddd9dd403ccb99cfff80
SHA1

77b5990399457fff13a8805d6d4d8840d88c8577
SHA256

8a2243421d8b8508e7e209ac82363740ae5df44acd6b4a78fc6ac0078c13081b
SHA512

47efa3c009104cdead5e64ff24a1d00cb6475ba36172b69275fdaff825094f948895fead833b1629e993f61a7d55873b011fd6376615e68e3517223a4a9b3b37
SSDEEP

49152:WUxr4rKKUOfEseW4onlfY5wErVXisuoy4:We8OKzSW48fY5wKXisFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
215bcd2d4cdaddd9dd403ccb99cfff80N.exe

Files

215bcd2d4cdaddd9dd403ccb99cfff80N.exe
.dll windows:5 windows x86 arch:x86

fe1b0e256efb02a838add9be4516bf42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mprapi

MprConfigInterfaceTransportGetInfo

advapi32

CryptCreateHash

imm32

ImmEscapeW

kernel32

EnterCriticalSection
GetFileTime
GetBinaryTypeW
GetLastError
GetModuleHandleW
GetModuleFileNameW

rasapi32

RasGetSubEntryHandleA

urlmon

URLDownloadToFileW

shell32

SHGetPathFromIDListW
SHEnumerateUnreadMailAccountsW

user32

GetPropW
GetUpdateRgn
GetScrollPos

gdi32

PtInRegion

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ