e198fa82dcb7b38b544c5d0c5357c9e22fb905566eda64114200a77fabd9e756exe[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e198fa82dcb7b38b544c5d0c5357c9e22fb905566eda64114200a77fabd9e756exe.exe
Size

5.3MB
MD5

da64bf2617c676a9dfd37677ee011faa
SHA1

4fba7e3323c7c2e8ea55c6c42464b7019e7dcb8f
SHA256

e198fa82dcb7b38b544c5d0c5357c9e22fb905566eda64114200a77fabd9e756
SHA512

539aa0a64753919d0f2e56e53923b2800c88fe96e1cb29f52ed10d0055d760d1f0c7df115f2045610aa6a70cfa89f8c59237a4b0b592f0d55f65e1d1e084a1cd
SSDEEP

98304:AT769iKezewaL5yM3fLdV7kvI6C6eO+pa96vymwEzShIexG4:/ppiIs4paYGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e198fa82dcb7b38b544c5d0c5357c9e22fb905566eda64114200a77fabd9e756exe.exe

Files

e198fa82dcb7b38b544c5d0c5357c9e22fb905566eda64114200a77fabd9e756exe.exe
.exe windows:6 windows x64 arch:x64

3e108abbf5b70ba74c91cc0339a005dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetLastError
GetConsoleCP
WriteConsoleW
VirtualProtect
CloseHandle
ReadConsoleW
GetLastError
Sleep

comctl32

ImageList_BeginDrag
FlatSB_SetScrollProp
ImageList_Copy
ImageList_GetIcon
ImageList_Add
ImageList_Merge
MenuHelp
UninitializeFlatSB
PropertySheet
LBItemFromPt
ShowHideMenuCtl
InitCommonControlsEx

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceExW
SHHandleUpdateImage

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ