8b01d8ba95e82f7c6cbcb62c177961a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b01d8ba95e82f7c6cbcb62c177961a0N.exe
Size

630KB
MD5

8b01d8ba95e82f7c6cbcb62c177961a0
SHA1

b2262c0e4346a0df82e8a25aca06a48d0af445b0
SHA256

2dd3e07960a821f4d9d6d25c39e566700f63997913ab1485ec86f552e4aafe27
SHA512

574c383602df6d9f15422c406e9dcc1f38f55cbc69c1ce97dc532e88f1995badc8091cf0ed386af94cfacd158bc3efe0947291fdb25ac15e43763c92740943ff
SSDEEP

12288:dhE5PDprAUl3MSyMWBZJZojEDfXKtofH7Baq1:BSyMWvJejEDaS7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b01d8ba95e82f7c6cbcb62c177961a0N.exe

Files

8b01d8ba95e82f7c6cbcb62c177961a0N.exe
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 437B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ