c9250f79cb6f2b8611950db67e249190N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9250f79cb6f2b8611950db67e249190N.exe
Size

106KB
MD5

c9250f79cb6f2b8611950db67e249190
SHA1

d96392d830e24597bbe95ed2c16815de1e459faa
SHA256

17fa1c4637dcacddeb58a477f1a1a8e40bbb559be8d261ce492d229ca3b0dec4
SHA512

7bed31da3c4a9a345b55f5dd1727eaf41995f43bc9e68a4fe53087df69e6b643d09cb924a2e5423c3e65b7b6974566469d0121364d04aac1959abe1741e4236d
SSDEEP

1536:20S788TBHldxtbAcLoTW3rI1qjtVaGePmBDxPIyyJFTdbtIVa8:n28+UcLoq3PmvmNZIyyJFBt8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9250f79cb6f2b8611950db67e249190N.exe

Files

c9250f79cb6f2b8611950db67e249190N.exe
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ