90c65f13e49094729d8da1ef2408d1a0N[.]exe | Triage

Sharing

General

Target

90c65f13e49094729d8da1ef2408d1a0N.exe
Size

11KB
MD5

90c65f13e49094729d8da1ef2408d1a0
SHA1

6a1e5dcd59f44a1c1e5f57473fa18a954b7a5a6b
SHA256

6d5f30402cfd01830668bb4892caa96d6850625b2e1a7f977cee8e09a55e2769
SHA512

d1faaa9660bf63edb3e983c91dcdf9d960ac0c82246ecb0bc47ec25ba534217bb9de126bbd98f5ec7963526e141bbc42693dad3a7a363317a76f0d173c72cf92
SSDEEP

48:aDS1qEqevmVglLXkPbIVwhMXrDhMveiJMwKMRuqSOB:vqevmVGgPkVwyDQeiJMwKsxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90c65f13e49094729d8da1ef2408d1a0N.exe

Files

90c65f13e49094729d8da1ef2408d1a0N.exe
.dll windows:6 windows x86 arch:x86

514c6c98ada0bc59a07c38ac0cfc03ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

fwpuclnt

FwpmFilterEnum0
FwpmFilterDestroyEnumHandle0
FwpmFilterCreateEnumHandle0
FwpmEngineClose0
FwpmFreeMemory0
FwpmFilterDeleteById0
FwpmEngineOpen0

kernel32

GetModuleHandleA
DisableThreadLibraryCalls
GetProcAddress
VirtualProtect

Sections

.text
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ