6809f5217ec5d62c7efc977c8ae65835 | Triage

Sharing

General

Target

6809f5217ec5d62c7efc977c8ae65835
Size

911KB
MD5

6809f5217ec5d62c7efc977c8ae65835
SHA1

b757542dfdd6354c7f68600e213242f9788b41b2
SHA256

2f7ab80f4166b10cdf2ba89949c2f35703f9adc7f07175c5e111c86bfb2843e5
SHA512

3e418c814d6ee9c5f2a5af508ec6efe01ca1df978f21392f6fbb884ba37969246f5b475e0255a106639894d135215afb821e653df45c93006ca1f7daefb0b598
SSDEEP

12288:QJrUmY9ew9sHadryhrOe12ruFtqOrkkoOghihuCPcSUzKzbUwzSSkUBWAMuUwi8A:QuH9vOHadr8CUmOpuCkS44UWSu/Ltkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mcuelf-v1.3.exe

Files

6809f5217ec5d62c7efc977c8ae65835
.rar
mcuelf-v1.3.exe
.exe windows:4 windows x86 arch:x86

0063d40de3e6f1067bc72b278483feb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

HttpSendRequestExA

comdlg32

GetSaveFileNameA

netapi32

Netbios

Sections

CODE
Size: 897KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url