6af595af1c612caa754cf7e506135820N[.]exe

General

Target

6af595af1c612caa754cf7e506135820N.exe
Size

2.0MB
MD5

6af595af1c612caa754cf7e506135820
SHA1

64182430610d0accf5d6f391b0872faf045771af
SHA256

25104db2e3f6b12dbd1d7f3e8ee67ae6853b66be156e1bde48d8ce03dffe11ea
SHA512

b1379cbdefbbdf55d9bb859ed8552c1e7abbe77a836ba90f8176ee7bf499ab4374acfa55b008d5eeb72a432bc8a7f447ea0adb3a7cbbcf520aaeb99254af21f0
SSDEEP

384:dpxnDepYkCMSvFiZL2L5kkyghttAW8pVf19KzWzR9NG1KDrWTi+8b3G2RMSN:RnsHS0g5kkygDsVf196WbUG+8b22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6af595af1c612caa754cf7e506135820N.exe

Files

6af595af1c612caa754cf7e506135820N.exe
.exe windows:4 windows x86 arch:x86

8234ffa1c6f923cf35524f4e06333a2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
GetACP
DeleteCriticalSection
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
lstrcpyA
GetOEMCP
SetHandleCount
GetFileType
SetStdHandle
SetFilePointer
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapFree
HeapAlloc
VirtualAlloc
FlushFileBuffers
CloseHandle

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8234ffa1c6f923cf35524f4e06333a2a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 5KB - Virtual size: 9KB

Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 9KB