c11bb254b8dd8aa1702d5d616a56fa10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c11bb254b8dd8aa1702d5d616a56fa10N.exe
Size

47KB
MD5

c11bb254b8dd8aa1702d5d616a56fa10
SHA1

f71f33c1005058aad42db26de8e25f92c2cc1f15
SHA256

7b487b2be8e8ef7ef8b075ef8d193a5562c67bcb9bcec5f6fcf53bc5a4acc607
SHA512

f7a7b59fd044f75f453d48aace6b2cb39e1695f2c94a60252ff6354e1cbd4196d8a3e27d510f922691d5de066607704e7b39d8d33ff99e4503a6d8401b10c8ad
SSDEEP

768:CnnOWEvtPvkFk58sCu84euZR5FbrGePc/3FttKAe3R82:CnOtvtPf58k8GtBSXtKAux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c11bb254b8dd8aa1702d5d616a56fa10N.exe

Files

c11bb254b8dd8aa1702d5d616a56fa10N.exe
.exe windows:5 windows x86 arch:x86

04d57c63a0a96f737ab7ac761ddeb655

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ