500c7b8c63f4829d20fbec8da383c2a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

500c7b8c63f4829d20fbec8da383c2a0N.exe
Size

181KB
MD5

500c7b8c63f4829d20fbec8da383c2a0
SHA1

a0278882bccf89b415f0023be8cfdc7e642d4f94
SHA256

5f54731582f4917b22472fc215e900bbd90327cad683879bba7b877bd3ae4959
SHA512

fb741a48d869da93c6504f2e16b045350c8ab7357ff2de7f6ec01c9c181c206320ea895fca3974600f69cd4bb3bb4f548e2b77850e6d3d3f0b8aa8f65f321800
SSDEEP

3072:mVOVK9crNdChBpaHwHjHDgy5fpjUthLI60ttH8Ra4KvqDUhYJ9f6zfvLsSi9:gq5dkpaHwH7kyzjUCttH8Ra7vNQoznL8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
500c7b8c63f4829d20fbec8da383c2a0N.exe

Files

500c7b8c63f4829d20fbec8da383c2a0N.exe
.dll windows:4 windows x86 arch:x86

c59bef6c2a3691b4b6e6254b06590a86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord5356

msvcrt

strcspn

user32

wsprintfA

advapi32

LookupPrivilegeValueA

ws2_32

socket

shlwapi

PathIsDirectoryA

ole32

CoSetProxyBlanket

oleaut32

SafeArrayUnaccessData

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

Exports

Exports

InputFile
PrintFile
WriteErrorLog

Sections

.text
Size: 160KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE