6c55b6e5104d0287efa3779c2d380a10N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6c55b6e5104d0287efa3779c2d380a10N.exe
Size

30KB
MD5

6c55b6e5104d0287efa3779c2d380a10
SHA1

067c4a1a947c654d7810a5682b90328b0aa7bad0
SHA256

925b1fdcd61dceb8c1c3a96b47e0219d6367c4cfcce46d8d14f4187b9a73e6f8
SHA512

88621a224aefc28d77802c815acfdd6f7e92b79e33c4ccaae6fc511afdd90d9a3f1edc1341fcb77ebc52a53f9c485f58b7d7e976b1b10df854075003e9525c98
SSDEEP

384:ncunpV83CTJqBQfClQfNp3JaXYuGOxFZcPe1WYrIN5RCfx1WPBmcUDdwaW+CowEY:ejQfr3JaXFGOxFqGAtNmfxIPZCpY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c55b6e5104d0287efa3779c2d380a10N.exe

Files

6c55b6e5104d0287efa3779c2d380a10N.exe
.exe windows:5 windows x64 arch:x64

4467bd35c2144621b470c4529650c638

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxA

shell32

SHGetSpecialFolderPathW

msvcr100

_commode
_fmode
__setusermatherr
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
_amsg_exit
malloc
_strdup
strtol
wcstombs
strncmp
free
_stricmp
realloc
memcpy
memset
_fileno
_setmode
setvbuf
atoi
getenv
_snwprintf
wcsncmp
wcsrchr
__iob_func
fprintf
strncpy
__set_app_type

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
Sleep
OutputDebugStringA
GetModuleHandleW
SetDllDirectoryW
SetDllDirectoryA
GetModuleHandleA
HeapAlloc
GetThreadLocale
lstrlenA
GetProcessHeap
HeapFree
GetProcAddress
IsBadReadPtr
SetLastError
VirtualFree
VirtualProtect
VirtualAlloc
LoadLibraryExW
SizeofResource
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetModuleFileNameW
GetLastError
FormatMessageA
LocalFree
GetTickCount

Exports

Exports

PyArg_ParseTuple
PyBool_FromLong
PyBytes_AsString
PyCFunction_NewEx
PyErr_Clear
PyErr_Occurred
PyErr_Print
PyErr_SetImportError
PyErr_SetObject
PyErr_SetString
PyEval_EvalCode
PyExc_ImportError
PyExc_RuntimeError
PyExc_SystemError
PyGILState_Ensure
PyGILState_Release
PyImport_AddModule
PyImport_AppendInittab
PyImport_ImportModule
PyLong_FromLong
PyLong_FromVoidPtr
PyModule_Create2
PyModule_GetDef
PyModule_GetDict
PyObject_CallObject
PyObject_SetAttrString
PyRun_InteractiveLoopFlags
PyRun_SimpleStringFlags
PySequence_GetItem
PySequence_Size
PySys_SetArgvEx
PySys_SetObject
PyTuple_New
PyTuple_SetItem
PyUnicode_FromFormat
PyUnicode_FromString
PyUnicode_FromWideChar
Py_FdIsInteractive
Py_Finalize
Py_GetPath
Py_Initialize
Py_IsInitialized
Py_SetPath
Py_SetProgramName
_PyImport_FindExtensionObject
_PyImport_FixupExtensionObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4467bd35c2144621b470c4529650c638

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 132B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 132B