dec6c8697420a7417062cf076436d460N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dec6c8697420a7417062cf076436d460N.exe
Size

603KB
MD5

dec6c8697420a7417062cf076436d460
SHA1

0873e69329df721ebc84ca73730b7336651f3c9f
SHA256

d8aebe75b1e43e0df5f6e2b57a469fb79a7168e0acc4458ed4dc138d490c6143
SHA512

a8df597acf3aed2675abfe169120c58244b08f1f575e3f8c7c2ac8ace44cafc382665170fe87791e30bb6c55558530d52cd88e5e401db6bead0b17d026e63a79
SSDEEP

12288:kV6rpWH0WKOc1Ja5FEiu+ZeR+HQlVVJWs1f4kBDUtwXnTdNx:hkUFOSa5FEipeEwlHmkBDUtMnTdN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dec6c8697420a7417062cf076436d460N.exe

Files

dec6c8697420a7417062cf076436d460N.exe
.exe windows:4 windows x86 arch:x86

4dc8c5a274869fc95df0e5e07558b7af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
GetCurrentProcessId

ntdll

DbgPrintEx
RtlLogStackBackTrace

oleaut32

VarI4FromI8

user32

GetCapture
GetForegroundWindow

Sections

.text
Size: 600KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE