665ad90352bff89abeb4908dbc8dcb20N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

665ad90352bff89abeb4908dbc8dcb20N.exe
Size

24KB
MD5

665ad90352bff89abeb4908dbc8dcb20
SHA1

b7d0102afc734abb2d277b6f7e75fa8b185521f4
SHA256

7708857c0396801c4d7d2a95898fbbd3e11f5c988bde742072314d64e97a7a5e
SHA512

3fac7d214f8d4479478ddd058f92db559567205cab030a40ebee06b025a254a9ee4b7510a4fe9517f48b0e6990e3eab4b2eaa55dc1fd9bca61773c87f59c8e52
SSDEEP

384:ErzPe3ulXCpNoApPFOkHaGeXpz+rx6ytN37DPvSqlkGz+J7NCB5GOdkoK80TSvUb:ErzqwCpNvFP5eX90v7zvHqn453dIb/4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665ad90352bff89abeb4908dbc8dcb20N.exe

Files

665ad90352bff89abeb4908dbc8dcb20N.exe
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE