e67f13d57adc43efa0fec72de5064930d958c20616c3bf437cc8365a765f363c[.]exe | Triage

Sharing

General

Target

e67f13d57adc43efa0fec72de5064930d958c20616c3bf437cc8365a765f363c.exe
Size

164KB
MD5

d9969bf00cee00beb8b45dc47832c456
SHA1

c8d82754bbc952410a1364d54339707122976ece
SHA256

e67f13d57adc43efa0fec72de5064930d958c20616c3bf437cc8365a765f363c
SHA512

e03706fe761304b25e8ec8147c1663ca3361fc9d97150f2f2af22edb91c26bb077ee9910a0033f0d4d745f993024c72416747cc5cc576c518f22d4d8b4944906
SSDEEP

3072:Nq2QaPFCJm5y/MC/ikf4jNDAL0nAftn6s4GASe:NJPF7kMCfM1AeAft6L3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e67f13d57adc43efa0fec72de5064930d958c20616c3bf437cc8365a765f363c.exe

Files

e67f13d57adc43efa0fec72de5064930d958c20616c3bf437cc8365a765f363c.exe
.exe windows:4 windows x86 arch:x86

ea7648221f145c283e53f496fb5fe83e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
ReplaceFileW
GetStartupInfoW
GetSystemTimeAsFileTime
Sleep
GetProcessId
TerminateProcess
InterlockedCompareExchange
EnumResourceTypesA
UnhandledExceptionFilter
GetCurrentProcessId
ExitProcess
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
InterlockedExchange
QueryPerformanceCounter
GetCurrentProcess

comctl32

InitCommonControlsEx

clusapi

CloseCluster

shell32

ShellExecuteW

user32

EnumDisplaySettingsW

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ