c6b0e96b141cf844caaf807290089c40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6b0e96b141cf844caaf807290089c40
Size

51KB
MD5

c6b0e96b141cf844caaf807290089c40
SHA1

16f75f87a3e6c10d546b29bc734afaa5ff171c21
SHA256

7cf0c4fa32f80e7a2a5a9c0aded25cf1065c957823e9d116960fe4b2e98ad364
SHA512

7c5ccb39ac9f124ac8ebd8151259795d4590141b1f4ae24176ab6565bec84cb3c51ce452e65adabcee2598db2ab261684c14c714f2ab6a2fecfae42503585f6b
SSDEEP

1536:UZFASFqN9xXbwxLnyJ8dwRS78JRphQaJT+CiAHNs:UhS9xXbwxLBS9+C7HNs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Label_Copy_Fedex.exe

Files

c6b0e96b141cf844caaf807290089c40
.zip
Label_Copy_Fedex.exe
.exe windows:5 windows x86 arch:x86

ed74c35daed41f1a483d3cd391006f96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
EnumDesktopsW
OemKeyScan
EndDialog
ValidateRect
GetActiveWindow
DialogBoxParamA
SetWindowPos
GetMenuCheckMarkDimensions
SetPropA

ole32

OleLockRunning
CoFreeLibrary
CreateAntiMoniker

kernel32

GetCurrentThreadId
CopyFileW
CreateProcessW
GetAtomNameA
SizeofResource
GetStartupInfoA
HeapDestroy
FindAtomW
HeapCreate
HeapFree
SetFileAttributesA
LocalAlloc
LocalFree
AddAtomA
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetProcAddress

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ