4b28987b38e22b6a743d1a4c606feee0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b28987b38e22b6a743d1a4c606feee0N.exe
Size

50KB
MD5

4b28987b38e22b6a743d1a4c606feee0
SHA1

de6a0467b11ab1d2074069bb9eb42aa2a9056d18
SHA256

30ce97934323e183833a36d674688b47ba555f900cc053a69a2f7eccf0d0e260
SHA512

9f27396977f39013583a86a6f3a0be83d71d5a4baa25eb82c8220673a22b8ab21188ab414e4d2486d44290ca14e99454e5f3c19e26bcff0925c31d430b91c9d7
SSDEEP

768:dD2oV2AJblQRNLzFrSNTVebqxjxMQhMk6CbWlCKfnTHhqEH:dCoVXGRTuhBxj/hMvPTcE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b28987b38e22b6a743d1a4c606feee0N.exe

Files

4b28987b38e22b6a743d1a4c606feee0N.exe
.exe windows:5 windows x86 arch:x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ