b6c25406e4c294fa72ce211305fd59b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6c25406e4c294fa72ce211305fd59b0N.exe
Size

433KB
MD5

b6c25406e4c294fa72ce211305fd59b0
SHA1

4a6880572b7e107ba7d8ad21df45540d642b6f82
SHA256

75226180059fb406cdb46e1e28f61d627666e4fd03f9adf841645d6565692489
SHA512

7c5019ee1d6e24f129cc538656758c7af0084e23baed12224a086c9ca37a407dc9bc1b0e001192a7efb4387058e1cf396dc2a432c7d67e0b796842ff6d2927a1
SSDEEP

6144:lOd/6miQ0YjBjVl+rkySY8pMC/vXQcp5KDfwVSb9Zg8B5TwnlAA58X:un00Rl0kySvKcAw69ZtwPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6c25406e4c294fa72ce211305fd59b0N.exe

Files

b6c25406e4c294fa72ce211305fd59b0N.exe
.exe windows:4 windows x86 arch:x86

76e77ff80d30596cd3b91c0e8892954e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
GetUserDefaultUILanguage

ntdll

NtWriteVirtualMemory

user32

GetInputDesktop

Sections

.text
Size: 430KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 293B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE