aacac56cc3466e19479c57d6192171d483b864263a27c65f7ffdae9a64b7ab50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aacac56cc3466e19479c57d6192171d483b864263a27c65f7ffdae9a64b7ab50N.exe
Size

146KB
MD5

eb5775508ff57f4218b1b61ec21bba90
SHA1

501e653d99d11da6953217ab4b24bbbd5fb61662
SHA256

aacac56cc3466e19479c57d6192171d483b864263a27c65f7ffdae9a64b7ab50
SHA512

0156789f9ec87ae0a3a89f1bc9725d1b687eacf0f0ed169e64b8720f0b5d49da9a48a95ec39c5a5f52a5f64f57de4747f7293c840c49a35a833ef444e74e2020
SSDEEP

3072:7fF3v9fCnhlOqUDCOdCX++XMNR9ykECc2stF11+vzw:jdv9qnzOqFOdGxIR9yqWtF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacac56cc3466e19479c57d6192171d483b864263a27c65f7ffdae9a64b7ab50N.exe

Files

aacac56cc3466e19479c57d6192171d483b864263a27c65f7ffdae9a64b7ab50N.exe
.exe windows:5 windows x86 arch:x86

3253fe9807b092d234fdfd09b7944cf9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
sprintf
calloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
rand
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_snprintf
??2@YAPAXI@Z
memcpy
malloc
free
__setusermatherr
??3@YAXPAX@Z

kernel32

CreateThread
WaitForSingleObject
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ