fa7f48c52bf1ffdef74adf2988caed60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa7f48c52bf1ffdef74adf2988caed60N.exe
Size

22KB
MD5

fa7f48c52bf1ffdef74adf2988caed60
SHA1

369a222b3f035f8dbc3f3e7d72a4d4eae4bc6367
SHA256

31ee41b73913e2193937ae6cbc73408724f4e4d92826e0119cebcb5f8d82931a
SHA512

be309ac1ceb3ad7ca4f5cc2e2e1489289b40046ecce3cd88f0e380c927924553a98fe8b7ea372b49f1901d897ae171f52d761e5d091305986d94a901ef9efa74
SSDEEP

384:AlcSS4lDmtK06srCjceAX33chUFrgduCT716s:AWSV4tdCmX3MhUWtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa7f48c52bf1ffdef74adf2988caed60N.exe

Files

fa7f48c52bf1ffdef74adf2988caed60N.exe
.exe windows:4 windows x86 arch:x86

584e76d619e1f9b7e9719bc6136ae2b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateMutexA
ExitProcess
FindAtomA
GetAtomNameA
InterlockedIncrement
ReleaseMutex
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fileno
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
scanf
signal
strlen
strtoul

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE