cf9c6a20a61d169475259106bddad030N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf9c6a20a61d169475259106bddad030N.exe
Size

20KB
MD5

cf9c6a20a61d169475259106bddad030
SHA1

9b59fc6d52788115303f84ce1c241d253a9d35f3
SHA256

18b4386f2a54d2c8875bb723b8f6f76799412f393ffb8bd0c8b9a5527f336179
SHA512

0d6cbfc6f4800cf7525971dca6e09a5f7c7687297f087ed3fa5d9cd1aa8b70d1a118a93cc980f8652bc532a4212caf0fcd5207bcb14188b3d3526ddb45ebe741
SSDEEP

384:3A0OHqZ2s5y3KDRmaF3eP8qp2I+zySY0vGYvuSBYBrT:jqs8VW3q+tYulYrT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9c6a20a61d169475259106bddad030N.exe

Files

cf9c6a20a61d169475259106bddad030N.exe
.exe windows:5 windows x86 arch:x86

54804ec924842829fb1cab8bd02cab15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
MoveFileExA
WriteFile
GetSystemDirectoryA
lstrcatA
GetLastError
lstrcmpiA
MoveFileA
GetModuleFileNameA
WinExec
CloseHandle
lstrcpyA

user32

CopyIcon
SetSystemCursor
LoadCursorA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ