ac1fdc7d78e53984a71cd433d504bf00N[.]exe | Triage

Sharing

General

Target

ac1fdc7d78e53984a71cd433d504bf00N.exe
Size

577KB
MD5

ac1fdc7d78e53984a71cd433d504bf00
SHA1

63ea358906ba9edbdc0de4e8bc784c5f9da7a89e
SHA256

1846ac8558c9637249eb39862b41e6d5c4d6908d2eb4d09a79727f511c7745cc
SHA512

725d71611700cbb3e965968d738dc2de42661b83573612f5542f8794489ab8d88f5e1815bffe927005d89c384d51bb22cac65e37725717ba54d2cc478a4a368e
SSDEEP

12288:S2g0ZuKNoFnRXTAiynVUvqN3wTVkFmtGJQ33Ffk:SP0ZuKNo/XgVEOWYmtGJ8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1fdc7d78e53984a71cd433d504bf00N.exe

Files

ac1fdc7d78e53984a71cd433d504bf00N.exe
.exe windows:4 windows x86 arch:x86

eb5f9297cd67a5c0cfd693f6067c2e0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaLookupNames2
AddUsersToEncryptedFile

shell32

SHValidateUNC

ole32

OleFlushClipboard

user32

GetMessageExtraInfo
GetInputDesktop
GetForegroundWindow

Sections

.text
Size: 570KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE