6cfee3e546359d7a9de0928f175bc030N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6cfee3e546359d7a9de0928f175bc030N.exe
Size

560KB
MD5

6cfee3e546359d7a9de0928f175bc030
SHA1

48bb8f0321901358335763f22fedd46ef8e220e6
SHA256

61a1531ea11eaf3929d36a772bb4e6013aca301e09a94d1d043355b3b9348952
SHA512

8f509462b41dfd38a478938d8c6d2524aed35b487e883ee5ca7ed0c1ba6c04568ee48ffd2677596da6bad1bbfe42882c89086d9192c833d138a8f76db5842a03
SSDEEP

12288:YWT2MI34YvE/MX1s226UMpTGyLSNEryiIdKRMSYPom5tdt:XRI34YJ2yiKSNEWLKMSYHPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cfee3e546359d7a9de0928f175bc030N.exe

Files

6cfee3e546359d7a9de0928f175bc030N.exe
.exe windows:4 windows x86 arch:x86

10fb1c2400b00486b1ce3ba179cd7963

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
VirtualQuery
VirtualAlloc
HeapReAlloc
InterlockedExchange
InitializeCriticalSection
IsBadCodePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
CloseHandle
SetStdHandle
lstrcpyA
SetFileAttributesW
LocalFree
FillConsoleOutputAttribute
GetModuleHandleA
FindNextFileA
GetModuleFileNameA
LocalAlloc
GetConsoleScreenBufferInfo
FindClose
SetUnhandledExceptionFilter
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
SetFileAttributesA
EnumSystemCodePagesW
RemoveDirectoryA
GetProcAddress
GetLastError
FindFirstFileA
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStdHandle
lstrcatA
SetConsoleCursorPosition
HeapAlloc
GetLocaleInfoA
lstrlenA
FillConsoleOutputCharacterA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
EnterCriticalSection
LeaveCriticalSection
DebugBreak
WriteFile
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

EndPaint
SetCursor
FillRect
GetMenuItemID
DrawIconEx
LoadStringA
LoadIconA
WindowFromPoint
SendMessageA
BeginPaint
GetIconInfo
GetForegroundWindow
GetMenu
GetWindowTextA
GetKeyboardLayout
MessageBoxA
CreateWindowExA
ReleaseDC
GetWindowContextHelpId
GetDlgItem
DefWindowProcA
ShowWindow
AppendMenuA
GetMenuItemCount
RemoveMenu
UpdateWindow
LoadCursorA
GetDlgCtrlID
DestroyIcon
RegisterClassA
GetDC

gdi32

SetDCPenColor
GetColorAdjustment
CreateRectRgn
GetObjectA
GetStockObject
CreateSolidBrush
BitBlt
EndPath
BeginPath
CreateEllipticRgn
MoveToEx
TextOutA
SelectClipPath
GetTextExtentPoint32A
SetViewportOrgEx
LineTo
DeleteDC
CreateDIBSection
AngleArc
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CombineRgn
CreateCompatibleBitmap

advapi32

LsaFreeMemory
LsaQueryInformationPolicy

shell32

SHFileOperationW
SHEmptyRecycleBinA
SHQueryRecycleBinA
SHFileOperationA
SHBrowseForFolderA

comctl32

ord17
ImageList_GetDragImage
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Create
ImageList_SetDragCursorImage

rpcrt4

RpcBindingSetAuthInfoA
RpcBindingInqOption

imm32

ImmCreateContext
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmSetOpenStatus
ImmAssociateContext
ImmGetContext
ImmGetConversionStatus

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10fb1c2400b00486b1ce3ba179cd7963

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

rpcrt4

imm32

Sections

.text Size: 104KB - Virtual size: 102KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 424KB - Virtual size: 423KB

.text
Size: 104KB - Virtual size: 102KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 424KB - Virtual size: 423KB