630819d4f53ddbf44bc00f987798e230N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

630819d4f53ddbf44bc00f987798e230N.exe
Size

12KB
MD5

630819d4f53ddbf44bc00f987798e230
SHA1

e9e559299540b419616a2670418f56e8977cfb5a
SHA256

17e44e6b41f9f2f3d2a9b0a222d032350116bb9f571aa398fce45c71c0242615
SHA512

fcc7d1ba76ebdf308d955c49d886a4f14d8f829dc134e3d83aa46e6663744425b6b38355bb6911625c6cccd60d7e3929e16278e995d5662c19f079afdbeb1eca
SSDEEP

192:ScV21JaobcyV7SM4o4feeEEZpaHlYj8wOY7B:SqKJaobT7TweUpGlYj8wOY7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
630819d4f53ddbf44bc00f987798e230N.exe

Files

630819d4f53ddbf44bc00f987798e230N.exe
.exe windows:4 windows x86 arch:x86

66b18ad74eb7db9d498d7ab6c08faba7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
LockResource
LoadResource
FindResourceA
GetTempPathA
CloseHandle
DuplicateHandle
GetCurrentProcess
SetStdHandle
CreatePipe
GetStdHandle
GetModuleHandleA
GetCommandLineA

user32

LoadStringA
wsprintfA

shlwapi

StrToIntA

msvcrt

strcat
strlen
malloc
_strlwr
strcpy
strcmp

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ