6d006ae965f1f024a913f55459f11130N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d006ae965f1f024a913f55459f11130N.exe
Size

5KB
MD5

6d006ae965f1f024a913f55459f11130
SHA1

78bd43b1c04af1140eb7ed79510d15823e1632e3
SHA256

ca4339cbfa20fd7df2695078b6a072fd2d829dfcdc95ed70a038a9102908682b
SHA512

0839044733694ffcc7019bf370af589a1a8e6df7ad99d1fe673abc16ad9f285db2a4859bc277cdbaa45d2a136cec923e009d232249895bd915e2f8ccb2df7835
SSDEEP

96:ZJTnXzvokJu8daqM7TWg5t0yyYHxJ24j0:ZJrXzwkBdYWg5tH/ah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d006ae965f1f024a913f55459f11130N.exe

Files

6d006ae965f1f024a913f55459f11130N.exe
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ