random[.]exe | Triage

Sharing

General

Target

random.exe
Size

323KB
MD5

f6f87a3cf0dc8cae32f9b302ae807c08
SHA1

8ae444261d1a8015d1efa166cb40fb2e8caf7e56
SHA256

46c0e3f54e49e35ea6bfb03b75cdf535d554229a1b18bd6df5811a06413b43cd
SHA512

4bc87ee24bfe569173bb2c62a5e15b87ffc8d5f32e05b103eec4afcdb40f1e26ac65090e4b212a702eaa4384426020b6a0eb027e6bfa38165c1d1df9ad42dc71
SSDEEP

6144:DmELSzfQ8U1e7z+Zp97y9lZlWayhE1qa19EsF0ryvZF/BerQCD:DmEco80e7zUxrh0H4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
random.exe

Files

random.exe
.exe windows:6 windows x86 arch:x86

24f64b73f556c47c0657ccf7b9c30c6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GlobalLock
GlobalUnlock

shell32

SHGetFileInfoW
SHGetSpecialFolderPathW

user32

CloseClipboard
GetClipboardData
GetDC
GetForegroundWindow
GetSystemMetrics
GetWindowLongW
OpenClipboard
ReleaseDC

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
GetPixel
SelectObject

ole32

CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
VariantInit

Sections

.text
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ