3a62e816e50cdba2f2b3a970262a4520N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a62e816e50cdba2f2b3a970262a4520N.exe
Size

484KB
MD5

3a62e816e50cdba2f2b3a970262a4520
SHA1

f9d999ecfb14ce17ebdd86b87402dc9f2d97a8c8
SHA256

115ee6ac177eb9e5d328456350134f39662adfc1e42981872aef03b401a06344
SHA512

e7d1777cd89fdc391dd17b2d7a16a21d1bc430701788a4a7c0724504ffc5a68d39e9d6e47c8fb37327f7062170f27f781fc74f1df1da83cd6c0f63b750a06691
SSDEEP

12288:nACW+3rLb1YqhyXnErmaahSL0z0y18kQHaVzSSX:A9kz1PulO0zR8ngzSSX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a62e816e50cdba2f2b3a970262a4520N.exe

Files

3a62e816e50cdba2f2b3a970262a4520N.exe
.exe windows:4 windows x86 arch:x86

6685000fcd7bcfff599a439e1d91e56e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket

mfc42

ord5065

msvcrt

__set_app_type

kernel32

CloseHandle
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

SetCapture
MessageBoxA

gdi32

BitBlt

advapi32

RegSetValueExA

shell32

Shell_NotifyIconA

oleaut32

VariantClear

Sections

.text
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

0
Size: - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 464KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ