2c23d9fb6197469ce0a260f33c9a9690N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c23d9fb6197469ce0a260f33c9a9690N.exe
Size

15KB
MD5

2c23d9fb6197469ce0a260f33c9a9690
SHA1

782f3767aa6fda70b537547cafa3c5268707eb2d
SHA256

293b0f89b480dedf4bbcdda6871d9f67641c69d5d54841bc6b91289a80ee483a
SHA512

11dd200c5cb05e07041f17d8efcbbd12aef5cdeaa64701a6fa50b74146b15cce26ca1c86fa5452116f993acba5c0022d69759bbcafaf1c4c571a9f872f4b5334
SSDEEP

192:MpIT2s4wnWUE6w9HQpdnIP0Al4MhUDa5tJnLlmr5m+0C0mayZ+6QBYfSW+LP/OZU:MpBs3MGI0w4Mh36F50mLK3+PXUrxc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c23d9fb6197469ce0a260f33c9a9690N.exe

Files

2c23d9fb6197469ce0a260f33c9a9690N.exe
.dll windows:4 windows x86 arch:x86

f4ec5a05f855744e7cf1d1f020944402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SendMessageTimeoutA

Exports

Exports

VulanHookDll
VulanUnHookDll

Sections

.text
Size: 10KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE