autorun6e[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

autorun6e.exe
Size

124KB
MD5

e9eb092dde09f13da6db61217c14706e
SHA1

f237d7a176757ae417d1269926b030c69ff5d646
SHA256

a92377e0a92a5b5985f2c82c5ab3a85d18e0787158d0c528dd70a83984c250d6
SHA512

f4083aa5571649685e52614195c5079aef3305f0a2167322b030aace246847b4f8858ba27314048ef96524b9bf1c2164b415d65caa8538ffc5cc11a50085aaf1
SSDEEP

3072:FufXdXAeKOZrPxp03Qx2MDL79phrrSeFnns1qThgxlGgU:FutKop03Cr9b3FnsGfgU

Score

1^/10

Malware Config

Signatures

Files

autorun6e.exe
.exe windows x86

66cb0de544dff42428349bf571ce2ace

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
CreateFileA
GetLocaleInfoW
GetOEMCP
GetACP
ReadFile
SetStdHandle
IsBadReadPtr
GetModuleFileNameA
LoadLibraryA
HeapSize
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
CreateMutexA
GetLastError
ReleaseMutex
CloseHandle
IsBadCodePtr
GetModuleHandleA
GetCurrentDirectoryA
GetFullPathNameA
GlobalAlloc
GetLocaleInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
GetFileType
InterlockedExchange
GlobalFree
HeapFree
ExitProcess
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersionExA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
WriteFile
FlushFileBuffers
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount

user32

SetCursor
FindWindowA
SetForegroundWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
AdjustWindowRectEx
LoadIconA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
ReleaseCapture
SetCapture
BeginPaint
EndPaint
GetCapture
PostQuitMessage
InvalidateRect
DefWindowProcA
MessageBoxA
LoadCursorA

gdi32

CreateDIBSection
StretchDIBits
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

winmm

sndPlaySoundA

dsetup

ord11

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66cb0de544dff42428349bf571ce2ace

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

dsetup

Sections

.text Size: 88KB - Virtual size: 85KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 88KB - Virtual size: 85KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 8KB - Virtual size: 7KB