b6f4a7c9d0a018d5ce3cb2d0a0f8a80cc0e711c8b03333672b6dabb0a28dcf85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f4a7c9d0a018d5ce3cb2d0a0f8a80cc0e711c8b03333672b6dabb0a28dcf85
Size

5KB
MD5

59624776a85f5603abd61ce0d4b64f67
SHA1

a1dc9eda63dbc1056487b17e7fecb6cc6b5d5324
SHA256

b6f4a7c9d0a018d5ce3cb2d0a0f8a80cc0e711c8b03333672b6dabb0a28dcf85
SHA512

d28c99cc5a576491ddcaefe28d448b81081e9615117398789bf492ea4e7f32f0dcb9d0c563df1a22139d3033d313ed9119ed508365b976eaa27bf9af1d96b3d5
SSDEEP

48:6Us+tHPIWX4u8emwgaCoUltAYUYzuVBA+LON3pTrg7IARVRd9orwsz:fptHPdX4Qmk0Nkm+LOnTrv4/Por

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6f4a7c9d0a018d5ce3cb2d0a0f8a80cc0e711c8b03333672b6dabb0a28dcf85

Files

b6f4a7c9d0a018d5ce3cb2d0a0f8a80cc0e711c8b03333672b6dabb0a28dcf85
.exe windows:4 windows x64

df09706d5d679f6933b898a91b048e9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilVarBindFree
SnmpUtilOidToA
SnmpUtilIdsToA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ