6a63f4392304ea27301147ebf2799050N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a63f4392304ea27301147ebf2799050N.exe
Size

155KB
MD5

6a63f4392304ea27301147ebf2799050
SHA1

5f93ae6ec154c19afbaea750104f5cc6e94c9d1e
SHA256

eb20a6d9db705feaf33a963e1e3c5ab2acc6722929baeca423955e632773cc6d
SHA512

c86f473c2120eb4baa4143ee7c0e50a21d03f681df19ba4f92579ce2cf05949a3543bc3150c5a3c11129a79b5ae64a5e7a85784292653b7f9bf4dc469ecb9dd5
SSDEEP

3072:j7toiHsjlrXLOcNdan+j9AK1iEewfzyefzAo9mxzntoq/yPEjRPS:j7toqOn2yCK1i9wL7AogzntoqXPS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a63f4392304ea27301147ebf2799050N.exe

Files

6a63f4392304ea27301147ebf2799050N.exe
.exe windows:4 windows x86 arch:x86

50ea42e92a787efde23a91f8b699a0bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtCancelTimer
NtClose
NtAccessCheckByType
NtClearEvent
NlsAnsiCodePage

comctl32

ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock

kernel32

FindNextFileW
GetCommProperties
WriteTapemark
GetComputerNameW

shell32

Shell_NotifyIconW
StrNCmpW
SheFullPathW
SheRemoveQuotesW

Sections

.text
Size: 62KB - Virtual size: 91KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE