78a0b080be7a13b7700ba9f0b2780a50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78a0b080be7a13b7700ba9f0b2780a50N.exe
Size

48KB
MD5

78a0b080be7a13b7700ba9f0b2780a50
SHA1

e627c98cefd7ef4686cac2ccd87dc0dd7de09b31
SHA256

15ee10166ebd16d8ca5eb60a6b5324f3a6957436d39f3ce8178f2fae987168aa
SHA512

812e850ac8d51122c51859080f5f15dac72e231d5f6e28aad2c24d983f542004bfdd8a05f3e587928ac017971fa4023ceefddce9323e8b034c1f74725b670103
SSDEEP

384:2/3iGC2mrRNEGtmsXnZauYBxSMdcoTrSogBJudBQeTSstX:2PitRNEGtXXnZ/JudBDSstX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a0b080be7a13b7700ba9f0b2780a50N.exe

Files

78a0b080be7a13b7700ba9f0b2780a50N.exe
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ