d6c5cbb750ab6e8d09248f28c07f694586f91cea820341fb1aa01ebea0bfa24d | Triage

Sharing

General

Target

d6c5cbb750ab6e8d09248f28c07f694586f91cea820341fb1aa01ebea0bfa24d
Size

2.8MB
MD5

d427d5b649b752c34bbb297d2262bd51
SHA1

d1f02089d21316573f910edfce39c5e1f24cad41
SHA256

d6c5cbb750ab6e8d09248f28c07f694586f91cea820341fb1aa01ebea0bfa24d
SHA512

439c3f824c21f869502033f890fb4f7e88685930b79fb1af1dd2ffd8e2bb3f584630926869f407e5f594c8545574faed5deb5aa6782ab31ede3ec5c06b440d58
SSDEEP

49152:M0X6sPA8ZQfnCwZoQVdIaGD9q5GZti6QqglNicFY2sAjmQ8+JEWZ1pv9AqvddIzg:tX6sIbvjZPIaGpq5GSnFeASQ8kVly0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c5cbb750ab6e8d09248f28c07f694586f91cea820341fb1aa01ebea0bfa24d

Files

d6c5cbb750ab6e8d09248f28c07f694586f91cea820341fb1aa01ebea0bfa24d
.exe windows x64

ee93ddebbf5258fb8be12e5333dca258

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 1.5MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ