0baf7622de98676da49e6111a6ded3a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0baf7622de98676da49e6111a6ded3a0N.exe
Size

119KB
MD5

0baf7622de98676da49e6111a6ded3a0
SHA1

60de77d2ccb0bd40e7ef79a92b0aa0cf4ab21fd9
SHA256

c662da0df4f28119229b00b8f6ade372668c34555ce6608097b6205541bfd7ab
SHA512

440cef0c2654e6ff8e21704771dc041ad76eef8c7705e45e76211c1a1018e9cf5823d53e8726257007287072df5603be0db3050bb015c02cb89231cba3ea49f3
SSDEEP

3072:fOh/lQT08yTztNB/qjzDBE2aDpkFFzCY0xfo/FS:fYJDALBE9pe8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0baf7622de98676da49e6111a6ded3a0N.exe

Files

0baf7622de98676da49e6111a6ded3a0N.exe
.exe windows:4 windows x86 arch:x86

186c6e607bf51d287242eceae7b7e5b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
WaitForSingleObject
FlushConsoleInputBuffer
GetConsoleAliasesLengthW
DnsHostnameToComputerNameA
Heap32ListFirst
BeginUpdateResourceA
GetProfileIntW
WriteTapemark
SetNamedPipeHandleState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE