862762dcbae09e17deccc64bd3960ac0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

862762dcbae09e17deccc64bd3960ac0N.exe
Size

20KB
MD5

862762dcbae09e17deccc64bd3960ac0
SHA1

e79441556cca3a86aff0ba0d0dc8df8930b48408
SHA256

930e49b303507de0e44f1b01b083e0f1b34e538e32c239826ffce580400d32f7
SHA512

5ca31c530ab2f322ec623495ca4399425ad7bdfe72c20c85a63d4b4826d926505b8a8f826a3a5bc9d596b08674e443e8d7456f4ac6fa81061a0b76943382dca0
SSDEEP

384:PT2KXjzs70cT0C6TZ4FcnyWAwKl7NTobfZf3/Hl:PT2t0cp04cpAwKz8jp3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
862762dcbae09e17deccc64bd3960ac0N.exe

Files

862762dcbae09e17deccc64bd3960ac0N.exe
.exe windows:4 windows x86 arch:x86

ebb5fea1a6448dbfbb1b73c1dd99b3d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
PostQuitMessage
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

kernel32

GetLogicalDriveStringsA
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
CreateFileA
GetModuleHandleA
FindFirstFileA
FindClose
GetFileSize
FindNextFileA
CloseHandle
GetFileType
GetModuleFileNameA
GetProcessHeap
DeleteFileA
GetEnvironmentStringsA

shfolder

SHGetFolderPathA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ