cf782d71c521d684d3e92d68ca6a23d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf782d71c521d684d3e92d68ca6a23d0N.exe
Size

596KB
MD5

cf782d71c521d684d3e92d68ca6a23d0
SHA1

b38a4cdcd7b5eff03042b74ff6cb6687d8a782ca
SHA256

2706352a9cbe240c468e39be40bbd6c0821622912b86cbedbf8f613ea2794bdf
SHA512

50605df64e55a03bc981ac0cce611eb3d96c42a15d50d49d67b018d89843ee74736fd7b4663baabb96953228664055bd628fa0d839044e0446b02c1d5eaf9c58
SSDEEP

12288:sqW246ZDv2+hEXOfmJ/YPoia0bpwZqg3o8qCERG:sqW24+JhEX4kt4pIl0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf782d71c521d684d3e92d68ca6a23d0N.exe

Files

cf782d71c521d684d3e92d68ca6a23d0N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 722B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ