119d92c20a620055dc38acfcfb4228e0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

119d92c20a620055dc38acfcfb4228e0N.exe
Size

114KB
MD5

119d92c20a620055dc38acfcfb4228e0
SHA1

c8f8ae1830af1a46652af33d6cb58eb24ae5b8a6
SHA256

091b6e13a10f0e696f4e00fd5a02500cd0ac988088719da69ba887d33c0e5bd2
SHA512

597790267c69b07d799a743302282c273c79e80503864cbd7e8300bf2281c504a0567ff6e1eb8ec75eb5787dc68896719d2d93e7c726d5bc1f7553467861fa98
SSDEEP

1536:xQ0evMm+tgg9S181xbGgdjhhli6pe60zwW6K4nyBt1urvyFV:K0evkg4/hdpe60z0Et1ur+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
119d92c20a620055dc38acfcfb4228e0N.exe

Files

119d92c20a620055dc38acfcfb4228e0N.exe
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE