421966f76d52b928b5c650a9b8b93cc0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

421966f76d52b928b5c650a9b8b93cc0N.exe
Size

25KB
MD5

421966f76d52b928b5c650a9b8b93cc0
SHA1

aa16c34e61e1c9cabe2598c6018dd9596c4d0148
SHA256

2c62a406215e5edf29b84c1d2b646b978ae9e2b1e0a0bbf533e38f191d145a7c
SHA512

45946b596bba8ee9a39528d0186c56279e70f8cc0c21207cf56bcec7317019f125830bf6446cf9b313ec9f1ff663272c28e383499885b7b13fee03f1b0f8b5be
SSDEEP

384:ErzP15O+/dOticeVjixeO01OA6sPLfO/qiDY6yx7PPJA8oYmg1v6JAj/Yol1KUM1:Erz1VOcc8mO1O2tGY6yJR1CSGJL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
421966f76d52b928b5c650a9b8b93cc0N.exe

Files

421966f76d52b928b5c650a9b8b93cc0N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE