cb44eb61d2f0e85ac6c0e138a4213ed0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb44eb61d2f0e85ac6c0e138a4213ed0N.exe
Size

4KB
MD5

cb44eb61d2f0e85ac6c0e138a4213ed0
SHA1

21748e1e7eb7aadc4a66bdbebdeadcfb7f88967c
SHA256

d9bcc644ff3447ebcc98d0c61af2c5b2012969654148b57410d875a179f1f77f
SHA512

4507e8e3b17fca7800e0ce99a27ae4f07c616163e739d7ccc8bf95ca76e7a9222e6515e0a9bf3c202257ac3f646ff33e5effa02725be97e5afa98fed75ed7031
SSDEEP

96:KQDLSH1Hf9b/TLF45Mm0vtsTnz4G5YrCmyAN6iQp8T:KdH1dLLF45MRFsrL5YrfN6Np8T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb44eb61d2f0e85ac6c0e138a4213ed0N.exe

Files

cb44eb61d2f0e85ac6c0e138a4213ed0N.exe
.exe windows:4 windows x86 arch:x86

148bf55ceb3e5471ef5f9ffc2bb75e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.vuw0
Size: 3KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vuw
Size: 968B - Virtual size: 968B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE