fd46679faced8ee7410d824cffeba810N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd46679faced8ee7410d824cffeba810N.exe
Size

70KB
MD5

fd46679faced8ee7410d824cffeba810
SHA1

cd4a74f6a98886a1820eb75fe563b16b2bc55d8b
SHA256

0f836a01c5ae89afe4377bf82f9a6d8f28391db7828fe2270bf3a166912f3dc0
SHA512

3f326ba9551d77d8e3df9707847f1ac96982b7a50c9c34bfae68eb4456bc45513d704533dbf7502ca03f96aab1a97087146e7b34930103e1e5d106ff038e9192
SSDEEP

1536:ojC0XSgWB1p93Z0F+6VKdCKMxdBpMsH7aUstvEfy2vpquK:SCoSFXp0F+6VKd7MxdBpM4aZvkZvpqz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd46679faced8ee7410d824cffeba810N.exe

Files

fd46679faced8ee7410d824cffeba810N.exe
.exe windows:4 windows x86 arch:x86

3e88f0e8ccd8d511ea7eed8b6ec9e643

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

uniansi

FormatMessageW
GetModuleFileNameW
lstrcpyW
LoadStringW

kernel32

GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrlenA
lstrcmpA

user32

MessageBoxW

ole32

CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_exit
_acmdln
_XcptFilter

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE