5c6a3c966aafd06cf476c24f68889950N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5c6a3c966aafd06cf476c24f68889950N.exe
Size

177KB
MD5

5c6a3c966aafd06cf476c24f68889950
SHA1

7a01345dccdc4529644ea290241cfabaad7f639d
SHA256

56df2d74c483a0cc4483e87cffb31b842ed691db716d970bfbb78140e8e5ce66
SHA512

abcb77a7996798e692353bce277e3f4780b984d785e00eb7fa9dd15c95b05c4ffd6e362197dd0a5f64ef6cfd427e8f00c17c7455314153d908a3832b3e52cf3b
SSDEEP

3072:ru9O/49HssqUj5RbSUTomFrSrkYCmojkihpCICIGXBJvIicWkip:ru9OAtFTnEwr2FihpCLvMip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c6a3c966aafd06cf476c24f68889950N.exe

Files

5c6a3c966aafd06cf476c24f68889950N.exe
.dll windows:10 windows x86 arch:x86

6757d44f7f6536e43496c43bd121b306

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

FXSEXT32.pdb

Imports

msvcrt

_except_handler4_common
_initterm
_callnewh
_amsg_exit
free
_XcptFilter
wcsrchr
wcschr
_wcsnset
_stricmp
_wsplitpath_s
_vsnwprintf
malloc
_wcsicmp
__CxxFrameHandler3
iswalpha
wcsncmp
memset

fxsapi

FaxClose
FaxConnectFaxServerW
FaxGetReceiptsOptions
FaxGetPersonalCoverPagesOption

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
HeapFree
SetLastError
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
ExpandEnvironmentStringsW
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
CreateDirectoryW
GetFileAttributesW
Sleep
GetComputerNameW
GetLocaleInfoEx
GetUserPreferredUILanguages
OutputDebugStringW
GetVersionExW
CreateFileW
GetFileType
DisableThreadLibraryCalls
GetModuleFileNameW
GetLastError
FindClose
FindNextFileW
FindFirstFileW
ReadFile

advapi32

GetTraceLoggerHandle
GetTraceEnableLevel
RegCreateKeyExW
RegisterTraceGuidsW
UnregisterTraceGuids
TraceMessage
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
GetTraceEnableFlags

user32

EnableWindow
GetWindowContextHelpId
CheckDlgButton
GetDlgItem
IsDlgButtonChecked
LoadStringW
EndDialog
SendMessageW
DialogBoxParamW
EnableMenuItem
AppendMenuW
MessageBeep
WinHelpW
MessageBoxW

mapi32

ord140
ord139
ord17
ord13
ord75

winspool.drv

OpenPrinterW
GetPrinterW
EnumPrintersW
ClosePrinter

shell32

SHSetLocalizedName
SHGetFolderPathW
SHGetFolderPathAndSubDirW

Exports

Exports

ExchEntryPoint

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6757d44f7f6536e43496c43bd121b306

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

fxsapi

kernel32

advapi32

user32

mapi32

winspool.drv

shell32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 1024B

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 142KB - Virtual size: 142KB

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 1024B

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 142KB - Virtual size: 142KB