1adf956c26f8b8cd8259e8dccc920510N[.]exe | Triage

Sharing

General

Target

1adf956c26f8b8cd8259e8dccc920510N.exe
Size

3KB
MD5

1adf956c26f8b8cd8259e8dccc920510
SHA1

a2f6157cbec95a880c729ca6a9497e4f4dd76e4b
SHA256

8fcccd1af5a487cab7af2202b89fe53c1989ef3a938fa746eb440b8d375356ff
SHA512

89ef04479791f641346971fc929dc62f1d248453d7d40ab0ede9d0089e58d41edcd02b49f0975d402b495cb6978f85c1594203cb9d3453970b68e355848ae64f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1adf956c26f8b8cd8259e8dccc920510N.exe

Files

1adf956c26f8b8cd8259e8dccc920510N.exe
.dll windows:5 windows x86 arch:x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ