e1fa242cf8b5b8dc3ff0ac19fd838170N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1fa242cf8b5b8dc3ff0ac19fd838170N.exe
Size

53KB
MD5

e1fa242cf8b5b8dc3ff0ac19fd838170
SHA1

8cc3e7eb520913495ef1f5b720c723b667c493d4
SHA256

8bed652fc7cb021c7b1bb2f1a9359f61942aed9837eac3784a1dcd660745adde
SHA512

4ba6fea5f8df495956ac9d21324526b31f53b6de5fd03c2a10b475bd6b8727fec190339b1e2dbcd35a24229d30d3d0f3c25c118677378acb826bf3a134ba4692
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIl:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1fa242cf8b5b8dc3ff0ac19fd838170N.exe

Files

e1fa242cf8b5b8dc3ff0ac19fd838170N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE