e9ababcbfbdafeef025c6adf89d3cb40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ababcbfbdafeef025c6adf89d3cb40N.exe
Size

36KB
MD5

e9ababcbfbdafeef025c6adf89d3cb40
SHA1

a870fd314b8c589968319aa28ec37783ee2aabb0
SHA256

da278db42dc3b638de0d0e8c7c34d0b73d0184f47a8fed88e7112780b9f84334
SHA512

e87e971d881b7bf7a5c8eaea306ccc22d842158c6d9e3598e0e74ff0a0c0855748cf2de2debb7e60c39eb8af1b420070eb5067334bac01e7d3b20daedaabcc36
SSDEEP

768:SeAaL04BLz72FTgIYYU08dEFr3bRktD/9lIaBmq:9AaL0407YAdFrLYzrmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9ababcbfbdafeef025c6adf89d3cb40N.exe

Files

e9ababcbfbdafeef025c6adf89d3cb40N.exe
.exe windows:4 windows x86 arch:x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ