6c291da4d935c54c4c53919619382110N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c291da4d935c54c4c53919619382110N.exe
Size

45KB
MD5

6c291da4d935c54c4c53919619382110
SHA1

7161feb13f5b0945cc2afb0d9b5433d4cbeab632
SHA256

5adce9bb67676000df8504733c4094fa2227947b209fb00588d15411d47da853
SHA512

fbb18b503501f7a860d575511dadbd1cb71c09ecdacd0d7fb3640be642c67fbf292792c63d576df8dbe16d5afdfcb977b6b0d48bf8721721c4d4836f7b6336c4
SSDEEP

384:o0ZHgzZSs60UnhidxRmyilYSJaKCEezHXfffXqEV:VZHoUogZQKK3fffXqU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c291da4d935c54c4c53919619382110N.exe

Files

6c291da4d935c54c4c53919619382110N.exe
.exe windows:3 windows x86 arch:x86

8deaef3e3b3c421e8712f0f1e57b5aa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

msi

MsiCloseHandle

netapi32

NetUseAdd
NetUseDel
NetUseEnum
NetUseGetInfo
NetUserAdd
NetUserChangePassword
NetUserDel
NetUserEnum
NetUserGetGroups
NetUserGetInfo
NetUserGetLocalGroups
NetUserModalsGet
NetUserModalsSet
NetUserSetGroups
NetUserSetInfo
NetShareAdd
NetShareCheck
NetShareDel
NetShareDelSticky
NetShareEnum
NetShareEnumSticky
NetShareGetInfo
NetShareSetInfo
NetStatisticsGet
NetGetJoinableOUs
NetGroupAdd
NetGroupAddUser
NetGroupDel
NetGroupDelUser
NetGroupEnum
NetGroupGetInfo

kernel32

MapViewOfFileEx
Beep
GetSystemDirectoryA
LocalAlloc
SetConsoleTitleW
EnumCalendarInfoA
CallNamedPipeA
ReadFile
CreateFileA

ole32

CoGetMalloc
CoGetDefaultContext
CoLoadLibrary
CoRegisterChannelHook

Sections

.code
Size: 5KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r
Size: - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ