6155d6546942d8563fabecf0ea9beff6 | Triage

Sharing

General

Target

6155d6546942d8563fabecf0ea9beff6
Size

17KB
MD5

6155d6546942d8563fabecf0ea9beff6
SHA1

238773b59caedea77ff465eef080f747e2a32b35
SHA256

95d46fbaf4aa36bbd12edf47f995ea2749d1683943a648fda0f003c23b1a0c23
SHA512

862476853da774ee2d057e80b1333e19dc3cc59bd29f5a410d76c38d87d36d9feefae818813e879706d6c7e9520ff4d9aa0794761d56e487b6ff3ade7620ff96
SSDEEP

384:GFF0rPdecmZO2Zp+Nye8pqrmub8TyztsDN:GXkdeoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6155d6546942d8563fabecf0ea9beff6

Files

6155d6546942d8563fabecf0ea9beff6
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE