eefb912070c7426fc319b51894b31f10N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eefb912070c7426fc319b51894b31f10N.exe
Size

56KB
MD5

eefb912070c7426fc319b51894b31f10
SHA1

17173dc236c89403f9a212c262c3a1c42c4cafea
SHA256

88668a741947247081d1fc50229b0d48ea5f1b11382d86d9d47314432c719953
SHA512

dadcd32816e65fc541c1d841746bdffcbc44133e1d3199eea51c005c504b8357441accd9f69e3184c2926f4de37d936dcdb1aaa84ef3606e692881455eae3dbe
SSDEEP

768:373OtJDvhzNsyXk58sCuSw26eWp12hzORvmGpYO1oN6GO3bIMp6np:3a/DvVNe58kSw2tw21ORvm7M3Ulp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eefb912070c7426fc319b51894b31f10N.exe

Files

eefb912070c7426fc319b51894b31f10N.exe
.exe windows:5 windows x86 arch:x86

bbc712c81dbe5f313d887223f25de84e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetStartupInfoW
RtlUnwind
DecodePointer
EncodePointer
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetSystemPowerStatus
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
OutputDebugStringW
SetLastError
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ