b8e1c2ec7c989509b61765e4ca691c70N[.]exe | Triage

Sharing

General

Target

b8e1c2ec7c989509b61765e4ca691c70N.exe
Size

50KB
MD5

b8e1c2ec7c989509b61765e4ca691c70
SHA1

06615fe3738c946bc85ce5893beec24c628b5746
SHA256

0b39fd8c6737a02a2bc3b440b92aaa83b03593c2b702239aef63290a95222b9f
SHA512

9b695a895dc4f06731ccfa20831bd5194e69d5c5c6e976da1682d4bc6bd577bd74f4d1fc550a73d1e6e0bff5653dbf5806337748af2e3358f5be36a9b8f0a037
SSDEEP

1536:xB1YcrVV31gD4GOZ9UPOmpccJZDd/PY+5oiSsiOYAZwKM+6LEsM:xB11rVV3s3is6LU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e1c2ec7c989509b61765e4ca691c70N.exe

Files

b8e1c2ec7c989509b61765e4ca691c70N.exe
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ