6d7ec4e4779dcba7fa16e4abf276a0abc86e70f833fab8f3f51c5e36e768cdb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d7ec4e4779dcba7fa16e4abf276a0abc86e70f833fab8f3f51c5e36e768cdb1
Size

44KB
MD5

16d97ac89f0f0d984f9d35d3ae78210b
SHA1

8ba30f1a489527ce1085ec838d72a452ba3c0678
SHA256

6d7ec4e4779dcba7fa16e4abf276a0abc86e70f833fab8f3f51c5e36e768cdb1
SHA512

fa3d7debe4a8812d58bbf106d1d86af1a9267cc08f9b0d9e32f84110383f5ccab6a3d961ca8db3d71ee690b924b59f956260d3a6d33763c1548521ebf8b530c9
SSDEEP

384:FeofhVjENihVOCv1pTGZ9UXv/kWJxGZ9UXvC5zaGZ9UXvSOo7QzFbZbs3vC:FHpENkIUpqZ9gvPcZ9gvUZ9gvw/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d7ec4e4779dcba7fa16e4abf276a0abc86e70f833fab8f3f51c5e36e768cdb1

Files

6d7ec4e4779dcba7fa16e4abf276a0abc86e70f833fab8f3f51c5e36e768cdb1
.exe windows x86

b77e7030878776e3b7226088f0c9ab13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetProcAddress
GetModuleHandleA
GetLastError
GetStartupInfoA

user32

wsprintfA
MessageBoxA

msvcrt

__getmainargs
strcpy
memset
_mbsstr
memcpy
realloc
malloc
strlen
_exit
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ