a8a1c6fc5203b48f95bbfaa346c37000N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8a1c6fc5203b48f95bbfaa346c37000N.exe
Size

24KB
MD5

a8a1c6fc5203b48f95bbfaa346c37000
SHA1

b724e423c2d181644e84baa314e2d12ce0d27bc3
SHA256

56296d14cf10c845e53d62c12c77b1046f28e74754f3a5288e9b57e605f94267
SHA512

9a27bd4816eccabc3a5e79b3742806a1462473f4858262d47a8e32f80e87b18853ae5ca7c7e78877c59ff3b0276dc2de2f0b645b7dd5b4d1fb4497b3b034ab3d
SSDEEP

384:+7ZfapsmVHgRK/rJ1OetA8gA49lBrenVy54Vp9htDtA9/toW3tbzt8:OpgTARK/rRggVq0hhWVtZzC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8a1c6fc5203b48f95bbfaa346c37000N.exe

Files

a8a1c6fc5203b48f95bbfaa346c37000N.exe
.exe windows:4 windows x86 arch:x86

5bdbfadc30986867f14f8da3f77b42ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
wsprintfW
MessageBoxW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetFileSize
CreateFileW
CloseHandle

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ