1b76c5203014d6b850d70aac338f4d40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b76c5203014d6b850d70aac338f4d40N.exe
Size

425KB
MD5

1b76c5203014d6b850d70aac338f4d40
SHA1

a023a43681c89bea447362cfb1881a39a54c7893
SHA256

c3ca62b3958ce837593e6c9e5e3848746bd4fefb13e9f55b746592014aa8d7dd
SHA512

25f13730b7cba08ab50ec06617d4cac76ae5c5d86de4e20c7f24fe72bc2dbbcc2ae70af162b2b4f90d27a9621114796f51826fa0c7ccc677007c19cab6b546b4
SSDEEP

12288:UdjXkWxkMMMMHMMMM3MMMMXyO73zsESc+MtJHRf2yWPD:UdgXMMMMHMMMM3MMMM5LRTHRfTuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b76c5203014d6b850d70aac338f4d40N.exe

Files

1b76c5203014d6b850d70aac338f4d40N.exe
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ