dbfd94eb5471276bb5a1ffb36cc6b920N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbfd94eb5471276bb5a1ffb36cc6b920N.exe
Size

183KB
MD5

dbfd94eb5471276bb5a1ffb36cc6b920
SHA1

b48fd166dd246f3fdacf33924b02fa90afcf29d2
SHA256

828b730f5f0bcf20e985f84fb4fa33d4dc369cd62234ac8570a3eb5f2495282b
SHA512

e7615fc3b36bbae76b35805ec7f7649205bedeebe265caaaf4d9df22d2eef0a4b6098e35ee4bf399128823b2a58d1c0055a9a2a6630dce7aa7c55e0c296c4989
SSDEEP

3072:t03Kvj7+d3VV/t5fT0UzA+YninOtowQgv4I/ZS5nthIQRzKnAiWs5u53V17P:P77+dLl5fTxKninOtowQgs5VKn2hVhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbfd94eb5471276bb5a1ffb36cc6b920N.exe

Files

dbfd94eb5471276bb5a1ffb36cc6b920N.exe
.exe windows:5 windows x86 arch:x86

887216cd14dc07ac5c7539304e24449b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetMessageW

gdi32

DeleteObject

advapi32

AdjustTokenPrivileges

shell32

ShellExecuteW

ws2_32

WSAStartup

Sections

.text
Size: 177KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE