cd791f5ea552e712a7799afa6bdea750N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd791f5ea552e712a7799afa6bdea750N.exe
Size

309KB
MD5

cd791f5ea552e712a7799afa6bdea750
SHA1

08e400aa0f41181078bc0e65fe74e2ac3995fee0
SHA256

c648308b77ddcfb62bad78f3bc71e113aeb202e7738f9ac630fd6fd03c146aca
SHA512

53bc9bbdfb9b66b042706dddf56f02979e27947a0985430ce9ad3a4b7e7cf09fe8f080ae7e5c8ddf5f065da2684b69118041549b509cdafdfd338f15c725b89d
SSDEEP

6144:TD/ruu++WpiweN00KxAEsHkpxD895Hw7qqDUdBbGAIw:X/ruiMiw6KxtsEpx4LBHGz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd791f5ea552e712a7799afa6bdea750N.exe

Files

cd791f5ea552e712a7799afa6bdea750N.exe
.exe windows:1 windows x86 arch:x86

8cc793409758ebb548ef3013a34d97c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

opengl32

glPushMatrix

msvcrt

exit

ntdll

NtCurrentTeb

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 907KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ