6c39c234124edcec40195a3a6c40b172 | Triage

Sharing

General

Target

6c39c234124edcec40195a3a6c40b172
Size

5.0MB
MD5

6c39c234124edcec40195a3a6c40b172
SHA1

cac5da384f8c7285c9996f46cf1e4aa3c8738630
SHA256

9ceba12c5261fc926ac60ed317e58104bb2cf3006eb50676b4e6438efac1c7ca
SHA512

3c9d8776b75fb2c3cf1566494a7ff75a58f2bf7fec388f7a4c27a0f644c4dab01376fce30d49872bf24aa9357e2a2a368f7b491f776db87d2dac80b5e582c06f
SSDEEP

24576:ubLgurgDdmMSirYbcMNgef0QeQjG/D8kIqJASk+RdhAdmvctA0pk9XEk:unsEMSPbcBVQej/NAARdhnvoAx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

6c39c234124edcec40195a3a6c40b172

Files

6c39c234124edcec40195a3a6c40b172
.dll windows x86

2e5708ae5fed0403e8117c645fb23e5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
CreateProcessA

msvcrt

free
_initterm
malloc
_adjust_fdiv
sprintf

Exports

Exports

PlayGame

Sections

.text
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ