6ef1bfde428d3246f625e1ccbf1774b0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6ef1bfde428d3246f625e1ccbf1774b0N.exe
Size

965KB
MD5

6ef1bfde428d3246f625e1ccbf1774b0
SHA1

bbbb802b687b9a87e064bcaf0629cf5d0855d430
SHA256

2c9977ca3c8f7eb7077be2e1821e21bc5d40ca9f223357195a3e1fa2dc268776
SHA512

5153b90603e4d230bc6e6f33226d75c0589313236ed19542ffc15e160ce449dc37578ca8ce93e4095ec1e6952ca2154de5655257da0f44eafa207f04075621c6
SSDEEP

24576:8kazuXgPda+501FDqpikcH7TbcGFZD5RuslwdkSmIp1Q:8k4Usb501FD+cbTbc8D5EddkSBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef1bfde428d3246f625e1ccbf1774b0N.exe

Files

6ef1bfde428d3246f625e1ccbf1774b0N.exe
.exe windows:5 windows x86 arch:x86

80a87d5167fde290f431ed3f1f33a272

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress
LCMapStringA
HeapDestroy
HeapCreate
HeapAlloc

user32

CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow

advapi32

RegDeleteValueA
RegQueryValueA
RegDeleteKeyA
RegEnumValueA

ole32

CoGetClassObject
OleRun
CoInitialize

Sections

.text
Size: 702KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 64B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

80a87d5167fde290f431ed3f1f33a272

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 702KB - Virtual size: 1.9MB

.itext Size: 3KB - Virtual size: 4KB

.data Size: 23KB - Virtual size: 23KB

.bss Size: - Virtual size: 20KB

.idata Size: 4KB - Virtual size: 13KB

.didata Size: 1024B - Virtual size: 2KB

.edata Size: 512B - Virtual size: 94B

.tls Size: - Virtual size: 64B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 172KB

.rsrc Size: 95KB - Virtual size: 96KB

.adata Size: 68KB - Virtual size: 114KB

.text
Size: 702KB - Virtual size: 1.9MB

.itext
Size: 3KB - Virtual size: 4KB

.data
Size: 23KB - Virtual size: 23KB

.bss
Size: - Virtual size: 20KB

.idata
Size: 4KB - Virtual size: 13KB

.didata
Size: 1024B - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 94B

.tls
Size: - Virtual size: 64B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 172KB

.rsrc
Size: 95KB - Virtual size: 96KB

.adata
Size: 68KB - Virtual size: 114KB