44cfdb2a5c4636d24b31da4960ef2040N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44cfdb2a5c4636d24b31da4960ef2040N.exe
Size

116KB
MD5

44cfdb2a5c4636d24b31da4960ef2040
SHA1

7e5de3476ea55a4026df26385699d41242e2b88b
SHA256

32b0d1fa1a80e9f3de978a1a791e5e287ccdbed5f8e7a3f21eb2913ffb063aef
SHA512

9b450edf8f57071ceda1da71eb6a8d7dd6166583d0ca91f65a7f0bdf167e9b06b2171a5c711de7d0824a9345ae38e4b69ebd269c801504fc54bc8e273b4e931f
SSDEEP

3072:sigd3oCnPpwQGPBcmOdBjNqrM+nN2Btt2r:KFphwQGP7OTMQjt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44cfdb2a5c4636d24b31da4960ef2040N.exe

Files

44cfdb2a5c4636d24b31da4960ef2040N.exe
.dll windows:1 windows x86 arch:x86

b4cc87f8668d876c8825053322d92c84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumSystemLocalesA
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileInformationByHandle
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
LoadLibraryA
OpenFileMappingW
SetEndOfFile
SetFilePointer
SetStdHandle
UnhandledExceptionFilter
VirtualAlloc

Exports

Exports

CreateProcessNotify

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ