cf2b5f465139cc503a51150762c1bc40N[.]exe | Triage

Sharing

General

Target

cf2b5f465139cc503a51150762c1bc40N.exe
Size

669KB
MD5

cf2b5f465139cc503a51150762c1bc40
SHA1

ae3df4e854bf4ade73c9b0a50b9bb7dbf5d7b990
SHA256

39499dd9ec7c300258547bc27886b92014c0f6ad10147be8437247180c14e708
SHA512

b34d4a4f9e8f7d35737994fde2a33a5b785b510bc059425f3a8295cf245ad12c6f2d263a801bdd28bef915f0b71b9823dcc2a2fd65db3a655751ecaa1d8e20cd
SSDEEP

12288:XPMBNf1rFe2lN26zXrhvazX+nC/OqAuiLXDSobdjoaxAt8NUtBtQTuMX6ueBsbdf:fMjfm2lDlS7uaOqAvSoaUAQGB2ThX6uV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf2b5f465139cc503a51150762c1bc40N.exe

Files

cf2b5f465139cc503a51150762c1bc40N.exe
.exe windows:4 windows x86 arch:x86

7ce4b05e85c8a8893fd21ffef2df707c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapFree
GetProcAddress
ExitProcess
GetCurrentProcess

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow

advapi32

RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegEnumValueA

ole32

CoCreateInstance
CoUninitialize
CoGetClassObject

Sections

.text
Size: 15KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE