d201f28a3b0f6a10c7f9f3d6906c2450N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d201f28a3b0f6a10c7f9f3d6906c2450N.exe
Size

28KB
MD5

d201f28a3b0f6a10c7f9f3d6906c2450
SHA1

61b1946bc69cc7ded73bb7233691b52fed123aa5
SHA256

eb8aff8ca26a956c57f8fc1f25efbd41b3becbcc041c2cac429e5f353f7979b7
SHA512

c4635b43d1afd9e4526c4430d5d33ad88b6f3e4f3ef8ae7b5054ca1cfc1747010b27469c26fa657b6a5624855a9d4cb37c25d00687353e3472190f3b0ea330ff
SSDEEP

384:qXffl5nHlA1Dc8qbRIP11w+9DsCqeZx+w1T61ipqwDLL:+HlIHoc1X5sCqeZx+k8ipL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d201f28a3b0f6a10c7f9f3d6906c2450N.exe

Files

d201f28a3b0f6a10c7f9f3d6906c2450N.exe
.exe windows:4 windows x86 arch:x86

1057288b5e2e57fb110cd97899eebe98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrcmpiW
lstrlenW
lstrcatW
lstrcpyW
FindClose
FreeLibrary
GetProcAddress
LoadLibraryW
FindFirstFileW
WriteFile
ReadFile
GetFileSize
GetFileAttributesW
GetLastError
SetLastError
GetModuleHandleA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_CxxThrowException
_except_handler3
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??2@YAPAXI@Z
??3@YAXPAX@Z

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ