23c798d4b676caf58b59d98707e08370N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23c798d4b676caf58b59d98707e08370N.exe
Size

212KB
MD5

23c798d4b676caf58b59d98707e08370
SHA1

1a5d443164504208febcd3bd9943098ecbd2bf43
SHA256

ce1493a2c6b8e2dabb730fc6616e3be4cc0445ee3c5e72cba074c991146a494b
SHA512

86f4549a2635090cd12571d164730c0cbb0bee469093a01a99eae72b0cb9cb7b2df7b893daa77ebec7f16bb0167e05f745a18946fd7ac54761864baafb3f1beb
SSDEEP

3072:vjNBSrod9CIF9IOXBj8F4fCmT/QY9akFaLTXlyieaBnyDOEMDELD2XSz3N6eS0gS:vX5jF73fCuHYpjlrBnJAD2XEN6er3qU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c798d4b676caf58b59d98707e08370N.exe

Files

23c798d4b676caf58b59d98707e08370N.exe
.exe windows:1 windows x86 arch:x86

c5f1e2c930cbbf7abd56f59541a0868a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleW
lstrcpyW
CloseHandle
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
GetVersionExW

user32

RegisterClassW
GetActiveWindow
SetWindowLongW
LoadStringW
SendMessageW
wsprintfW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 208B - Virtual size: 208B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: 409B - Virtual size: 409B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE