60bdcdc7eaa6c6efe599456953a02640N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60bdcdc7eaa6c6efe599456953a02640N.exe
Size

42KB
MD5

60bdcdc7eaa6c6efe599456953a02640
SHA1

72077657e3f6446eab9779290efcbc35d39444bc
SHA256

efd689b6f877886bf276a671496e7e4dce274aec5e8d4ba592cd527adb4f6d7c
SHA512

2432d43c79d26e488b0f230527ced00f0a9452f589fb3e88946a8261c2c31119d2960ee52d86ccca9f800d1b7871a5fbe4435ff069a2d3e3e1051a47a1f2c201
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhe:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60bdcdc7eaa6c6efe599456953a02640N.exe

Files

60bdcdc7eaa6c6efe599456953a02640N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE