e664e6168a7845f447699e311ea90a30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e664e6168a7845f447699e311ea90a30N.exe
Size

321KB
MD5

e664e6168a7845f447699e311ea90a30
SHA1

d00b8130f19552e78f7cc1db3e639fd94d423bab
SHA256

91633f6db3ee3a0dac07639407fbe9936e8ad3c54aaa619843c7576578500ac0
SHA512

978374b318bb84433b4f6808605b42764d55f6a699bfe15e6776e732732bfacfde2ca5f1751f6f579206da8f7cc61633f7015b649376237112f93e114dbff43f
SSDEEP

6144:FVC7rGN3bkty0Mki8787O71rkhJSafmcCZg:W7rGNrkty0fkhAUmLg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e664e6168a7845f447699e311ea90a30N.exe

Files

e664e6168a7845f447699e311ea90a30N.exe
.exe windows:4 windows x86 arch:x86

0957287b16f4d58ba4d8c06063bbd080

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 292KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ