d6a44fe3246e310829e70eee55fbf825fcdb2d01a381533412d9a8dc392aea26[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

d6a44fe3246e310829e70eee55fbf825fcdb2d01a381533412d9a8dc392aea26.exe
Size

325KB
MD5

67250ba66ff798949b3594da4ab822c8
SHA1

08884f25e669e730af9b92b460ab1ee9a1ae3e12
SHA256

d6a44fe3246e310829e70eee55fbf825fcdb2d01a381533412d9a8dc392aea26
SHA512

6a5234a449788e1009f605a8caec5d6582cb1f332ca917fe94a4264e3f21c3c8ef07796680e76914fe6e76fa654ba255394008dd000da3489de6dff1e5d9dec6
SSDEEP

6144:4QaXL1yHLo/1VshtGFDOcJki+h9MA/Z2FqtP/zX:4dRyHLostWDOcJP+A7FOnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a44fe3246e310829e70eee55fbf825fcdb2d01a381533412d9a8dc392aea26.exe

Files

d6a44fe3246e310829e70eee55fbf825fcdb2d01a381533412d9a8dc392aea26.exe
.exe windows:5 windows x86 arch:x86

ab30f9a28ff8f75871f31782e15330bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputW
EnumCalendarInfoW
InterlockedDecrement
GetCurrentProcess
GetLogicalDriveStringsW
InterlockedCompareExchange
WriteConsoleInputA
FreeEnvironmentStringsA
GetModuleHandleW
EnumCalendarInfoExW
FindNextVolumeMountPointA
EnumTimeFormatsW
LoadLibraryW
GetProcessHandleCount
GetVersionExW
GetAtomNameW
GetShortPathNameA
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
EnumSystemCodePagesW
SetComputerNameA
LoadLibraryA
GetCommMask
FindNextFileA
SetLocaleInfoW
EnumDateFormatsW
OpenEventW
ReadConsoleInputW
TerminateJobObject
GetWindowsDirectoryW
FindNextVolumeA
LCMapStringW
SwitchToThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
HeapReAlloc
HeapAlloc
Sleep
ExitProcess
GetStartupInfoW
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
HeapCreate
VirtualFree
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
RaiseException
LCMapStringA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
CreateFileA
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
ReadFile

user32

GetMenuItemID
DdeQueryStringA
GetComboBoxInfo
GetWindowTextLengthW

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab30f9a28ff8f75871f31782e15330bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 265KB - Virtual size: 265KB

.data Size: 24KB - Virtual size: 43KB

.rsrc Size: 34KB - Virtual size: 34KB

.text
Size: 265KB - Virtual size: 265KB

.data
Size: 24KB - Virtual size: 43KB

.rsrc
Size: 34KB - Virtual size: 34KB