eb6649696bff52e20d6649b0bef91d20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb6649696bff52e20d6649b0bef91d20
Size

17KB
MD5

eb6649696bff52e20d6649b0bef91d20
SHA1

aba7e3091fbb1a4a69f70a2ca46d39a86821f57a
SHA256

faa087a6cce99e12f79c192435edb8e4014307412d610bac384b123d63a4d825
SHA512

0b0bf2aa6b352d61b801d96b8527cb2e87ee751b6e7d2e423568fcb75bb21c55403c1b29a4f594838f7986f33dd3c1f6b4833da756ab45c695d7f2e3003fefc0
SSDEEP

384:UFKakdP1k7cmZO2Zp+Nye8pqrmub8TyztsDN:UMa+S7oKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6649696bff52e20d6649b0bef91d20

Files

eb6649696bff52e20d6649b0bef91d20
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE