65a4b913f32f1c9567ec8468ae9689c5b900c54843fab84cdfab441986a5519b[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65a4b913f32f1c9567ec8468ae9689c5b900c54843fab84cdfab441986a5519b.exe
Size

5.7MB
MD5

eb9d1132e0c967a623fd5d9ebd53d109
SHA1

c0f5221c4a4d1d75eb7bbb39f9f9b66bb868d615
SHA256

65a4b913f32f1c9567ec8468ae9689c5b900c54843fab84cdfab441986a5519b
SHA512

11be80eac96a6dea3a13343da8d3172cb3b57b299a0ca2cb0c6a7f772bc2b2b4f380f4e2eaa57530e83de21d46803edbf8219d176f1bffda8d931907c0cb39a1
SSDEEP

98304:CT7LJPVp/Qcvrh7OrlOovCftmnQaNQbBiacsTrooR43+U5/Mpf09lo+pmJWX1s:w7td9tjh7OBCSxQbIahTr34uU5W0U+SB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65a4b913f32f1c9567ec8468ae9689c5b900c54843fab84cdfab441986a5519b.exe

Files

65a4b913f32f1c9567ec8468ae9689c5b900c54843fab84cdfab441986a5519b.exe
.exe windows:6 windows x86 arch:x86

bd46ef3ed97ea313bc4fa50df7a2e275

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetDC
CharUpperBuffW

gdi32

BitBlt

Sections

.text
Size: - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ