165a8e3d7cb94dexeexeexeex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165a8e3d7cb94dexeexeexeex.exe
Size

2.0MB
MD5

165a8e3d7cb94db615e495df978f7797
SHA1

de3bc0fce3b1c4e5b3c2e5d6b397651d571c3124
SHA256

16c1d3c50cf2238efff63e906d38bf00915b324257d88ae4bf737ab51a8395ba
SHA512

ce8925420cac877f6004906d8e221f3c8ca34c4872190ab9873e4292a81019c2e884fb877d8db503dfd8f7d2575e8c54958643025055d4d18693454ac6ad508d
SSDEEP

49152:K5jZRMCnG3nkRoX5ycGZipz0WfD3sM+mZ:KLGj3loZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165a8e3d7cb94dexeexeexeex.exe

Files

165a8e3d7cb94dexeexeexeex.exe
.exe windows x86

6b439a9504a6d45fde8efa1d69e94202

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
VirtualAlloc

user32

GetDialogBaseUnits
GetActiveWindow

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE