c98b9a4e25835eed5a7a08348cf67aa0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c98b9a4e25835eed5a7a08348cf67aa0N.exe
Size

60KB
MD5

c98b9a4e25835eed5a7a08348cf67aa0
SHA1

53b2ec156bbc95975a162ea63a31ac3f48c6a9c9
SHA256

cc7e452a85b153cae61d82f7b9873d9f34295829c04cda45c08f51c3aaf4930e
SHA512

9440792ce0036960368d5a7bda0b4045592c6bbdd81c4a7f5d803e08c44e9fb6179d395ec02472c767e50812a6e7084c6d4090a6674686d62f032e5905b2955d
SSDEEP

1536:nEUeDOQRnM8QjFjbtYceqgaVwkCrPYArcrPYAjAnKpwNRhqv:nEUeDOQRnM8QjFjbtYceqgghiAArsAA3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c98b9a4e25835eed5a7a08348cf67aa0N.exe

Files

c98b9a4e25835eed5a7a08348cf67aa0N.exe
.exe windows:4 windows x86 arch:x86

bdc20519a53bedb5ea7c49472c109578

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
Sleep
LoadLibraryA
GetProcAddress

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ