1ed3925a1bd8b6bf04576dfbc707cdb0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ed3925a1bd8b6bf04576dfbc707cdb0N.exe
Size

1.4MB
MD5

1ed3925a1bd8b6bf04576dfbc707cdb0
SHA1

55a8ae7a3b52fa96fea5d4c797bc16b0afecc2f7
SHA256

6286a827ec170e58b79aee3138c2fdf2cfb703747e43226747eefe71cf9354a2
SHA512

a14ac3cbba701713ed39bf0f58a928394a31cf911845919c2108452f030799b4443dcc41d77b9c2a64713280c3b1a464a9250eb5b42ba97f7ebc3fcded2e5398
SSDEEP

12288:AscfuikqrAzGaasopBHWDDUr8+ZfhV8CxUHAtqWsK09T+r0+:Asc2iyzGaaFpB2DVGZHxUEqWsK0l+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ed3925a1bd8b6bf04576dfbc707cdb0N.exe

Files

1ed3925a1bd8b6bf04576dfbc707cdb0N.exe
.exe windows:4 windows x86 arch:x86

ef2b8c228d34f5c8feea1a0170de45b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msys-1.0

__errno
__main
_ctype_
_setmode
bsearch
calloc
close
cygwin_internal
dll_crt0__FP11per_process
exit
fclose
fflush
fgets
fopen
fprintf
fputs
free
fstat
getcwd
getenv
isatty
malloc
memcpy
memmove
open
printf
putc
puts
qsort
read
realloc
setlocale
strcasecmp
strchr
strcmp
strdup
strerror
strncmp
vfprintf
write

kernel32

GetModuleHandleA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1.4MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE