1e01b1f0c235ef076dfb34d5a2c3e410N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e01b1f0c235ef076dfb34d5a2c3e410N.exe
Size

200KB
MD5

1e01b1f0c235ef076dfb34d5a2c3e410
SHA1

46f3aa74d2a5319b3d7b3384e3b51eeeddc5822f
SHA256

9282968b285746df5c45c65476f9bdd3d60e21914d72f63a388d110129c5cd3a
SHA512

2298050e5b2a7422594ee6134bdb627ad3620e82cf96098f8d0bb8b39fb19847b73d85a1b8588411e97871d800101663ec2d93524c6a625b40655b4350c0f2e6
SSDEEP

6144:Tf5Wab+ZAjWgXbYsIJAR2yfJEXf/R9Y89I:TL+ZAKutMARZhe5i89I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e01b1f0c235ef076dfb34d5a2c3e410N.exe

Files

1e01b1f0c235ef076dfb34d5a2c3e410N.exe
.exe windows:4 windows x86 arch:x86

7915330e7f9a1d01d954a90ff8d10b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

pec1
Size: 187KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE