6f55c57da5d3f78ad9d2979e87d8e410N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f55c57da5d3f78ad9d2979e87d8e410N.exe
Size

44KB
MD5

6f55c57da5d3f78ad9d2979e87d8e410
SHA1

db158b1242b09e1aef7baec68ea94e371076abe7
SHA256

8d9764c1319796e31b012b544664e39ae52024d43d6f355ec77c87e368ae4c8e
SHA512

091d2e4c8ba431efe8da1ae39c9250030ebbc2b83428f920b2abbf168f636777c191d2a760ca5ff82960b89c542afc9c66732bf939678f8baba632070a9e7670
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNho:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f55c57da5d3f78ad9d2979e87d8e410N.exe

Files

6f55c57da5d3f78ad9d2979e87d8e410N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE