6d37eac8eb7838c025b6d5d1093748c0_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d37eac8eb7838c025b6d5d1093748c0_exe32.exe
Size

66KB
MD5

6d37eac8eb7838c025b6d5d1093748c0
SHA1

2a1df1be6f260ad4bdfdadcc37e7dc25ce6988a8
SHA256

a6d211c0921029a136974095fa51666dec4d15e93588151970c299131ead4786
SHA512

39b9a6ddb2178ec2b13680c6cdc02d1f3a5b479f5ef7a8e67b3fd1bfbab176874ebca30c4a1f369c7d2ffaaf7c8b18f49902a1418e3d62e53a99852bfc1c8bbe
SSDEEP

1536:i8aR2UhXIQ7NkuKTDeyDA5ao1NjKXGuQRtVSmXHKc:iDgUh4GezecAnjCctlHP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d37eac8eb7838c025b6d5d1093748c0_exe32.exe

Files

6d37eac8eb7838c025b6d5d1093748c0_exe32.exe
.exe windows:4 windows x86

930ddfde92145261d1b94e1b5280a09e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomW
GetCalendarMonthsInYear
FlushViewOfFile
SortCloseHandle
GetDefaultCommConfigW
Heap32ListNext
CreateThreadpoolCleanupGroup
CreateProcessInternalA
GetCompressedFileSizeTransactedW
SetCommBreak

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE