9b6580a241d44be33a9d203a382ecd60N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b6580a241d44be33a9d203a382ecd60N.exe
Size

812KB
MD5

9b6580a241d44be33a9d203a382ecd60
SHA1

29d74abb11a2526d3a806d38987288262607bb7e
SHA256

9e582c15b37b600fcac2060b0a482d96c26ce165dec126f6ac9c5987858a1849
SHA512

abf39778074f242aa06aee12c72e76e9ef36ae4fcacd50fda8be0810a3f299a5185a86cde5cc8015ed4137e3bbd94a46bf954a06be388cafa96c38c26c9f22a6
SSDEEP

12288:or7oprM3RgtBZeYxskFTa2Cp28+cC1F+BA8Ax0sYTftmcvLwD7+3JjbWrwrLYJlU:oHoNWSeYVGxZq+Bqar1jw/+3pWrdW5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b6580a241d44be33a9d203a382ecd60N.exe

Files

9b6580a241d44be33a9d203a382ecd60N.exe
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

FreePointer
outlookInitialization
outlookMailbox

Sections

.text
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 806KB - Virtual size: 806KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ