c6bbaf60fa10e3b5c0a11bfe0324ca40N[.]exe

General

Target

c6bbaf60fa10e3b5c0a11bfe0324ca40N.exe
Size

185KB
MD5

c6bbaf60fa10e3b5c0a11bfe0324ca40
SHA1

349e43bf612ebfbaa2d6105a55c0fb0958b3f2d0
SHA256

9fe125ec1853edb15695413ba295a0d2971a6a1824f625e0fcbc0db2584c00c2
SHA512

275b8cc54369628c2c183766aa178868c2d3b28c16e12bbec8229d30ebcb5e79715d5d9192bcfd1c007d29dcd9ac52f3c8f5ecd5bd3d935c38f88aad67b771ac
SSDEEP

3072:s1D9qCCeY6lOVSiMbdm97e6zMiQkJrrWDywSke05xXOscqwocESJe:nC0DVSiay7eWNJrMS2+/v7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6bbaf60fa10e3b5c0a11bfe0324ca40N.exe

Files

c6bbaf60fa10e3b5c0a11bfe0324ca40N.exe
.exe windows:4 windows x86 arch:x86

83a97d790b706612e4d2d2ade691bde0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
WriteProcessMemory
TlsSetValue
SetThreadContext
GetThreadContext
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
lstrcpyA
GetModuleFileNameW
GetSystemTime
lstrcatA
GetWindowsDirectoryA
TlsGetValue
TlsAlloc
CreateThread
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
GetSystemInfo
MultiByteToWideChar
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetStdHandle
HeapSize
LCMapStringA

user32

GetWindowRect
GetWindowRgn
KillTimer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83a97d790b706612e4d2d2ade691bde0

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 55KB

.rsrc Size: 4KB - Virtual size: 680B

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 55KB

.rsrc
Size: 4KB - Virtual size: 680B