Malicious_9e5fe1db6eabeb6557031b14bf98c4060f86228ec64dee64b9ec0af7f8b92070[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Malicious_9e5fe1db6eabeb6557031b14bf98c4060f86228ec64dee64b9ec0af7f8b92070.exe
Size

74KB
MD5

c64b3b74b1d4ef2dfb395514ef0eab0d
SHA1

4c295d56dffa558a297a39f68eeec108065bfc0f
SHA256

9e5fe1db6eabeb6557031b14bf98c4060f86228ec64dee64b9ec0af7f8b92070
SHA512

6aaf7cf2aa695891a6c35a9ad821b99a6640570b4be7ae38c9b3578449020e528b22696790e296abd94fa2e2f8cfa7668ea3d0cc22a98de1437e3d2f284b8039
SSDEEP

1536:t6eJN0PdL8SBJEq+KM7maGm/MqXO42i4YGTkOwJ:tFlSB+q+ncecilGAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Malicious_9e5fe1db6eabeb6557031b14bf98c4060f86228ec64dee64b9ec0af7f8b92070.exe

Files

Malicious_9e5fe1db6eabeb6557031b14bf98c4060f86228ec64dee64b9ec0af7f8b92070.exe
.dll regsvr32 windows x64

90aa3843d5aa658ac020bdbd15d575c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

SetTimer
MessageBoxA
GetClassNameA
SendMessageA

Exports

Exports

DllRegisterServer

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ