ff5a150558a54fadd110fc80ffd8bbd0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff5a150558a54fadd110fc80ffd8bbd0N.exe
Size

29KB
MD5

ff5a150558a54fadd110fc80ffd8bbd0
SHA1

9c6bcba4d119f9eab469365316e182e5aa1e4f0a
SHA256

a92450f9b2376b70c9ad356d90d59f899446e42788c19cd4257e6224fbdb5ee4
SHA512

2023ab9de84cc82aef73c892f39b1cb56b0789e64bd566824f084fc3b17c37932a0dcdeb1b9c9142b559d189a55320b0e375f977dd438ffadb02e4e803dafa91
SSDEEP

384:gxBM3bV0V/N4NidEepdEurPDdhClkzLDw2uzibjV3gYXo4m4m4m4GCyzZ5jz:g80Ve2Zr+l0u0jmY44m4m4m4PUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff5a150558a54fadd110fc80ffd8bbd0N.exe

Files

ff5a150558a54fadd110fc80ffd8bbd0N.exe
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE