faafb7c722c7b6b8a5cc1a3fed4575a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faafb7c722c7b6b8a5cc1a3fed4575a0N.exe
Size

7KB
MD5

faafb7c722c7b6b8a5cc1a3fed4575a0
SHA1

1cacddc5fc23b57902cbd24471f92ee184c02753
SHA256

972650d3cdf2f4964c48d359d22746d7b2935f70c2a2c88b9407f84b209cbd35
SHA512

f0d8c025aa163ac3e44a0e1f6f2b09fe5a6ef42ebd4665386b98d9f2edc0e399e17bbc25cd50f1e70f5148cf9ab61eb8175bd9d527ddcf58beb084fa9c1f1fe7
SSDEEP

96:z0QR9B6BvAwbE2SM4AoutoxRBIukYib9o0LUwz:JR94/bE2SM4Aoi9NoA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faafb7c722c7b6b8a5cc1a3fed4575a0N.exe

Files

faafb7c722c7b6b8a5cc1a3fed4575a0N.exe
.dll windows:5 windows x86 arch:x86

01c41bde2e28b577655077042a01522f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 359B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ