0b6bda881b82f893174890549cb7e13b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b6bda881b82f893174890549cb7e13b
Size

334KB
MD5

0b6bda881b82f893174890549cb7e13b
SHA1

388a189e13b8e3a56396cb075314f6b8a6eee485
SHA256

ca820b6f89947dc60e2bd327ceb4f07065669e610dccbc26be0a3a67a5961e43
SHA512

26b9dc02a894efae9e198bac2ee84c4b73aed1c611d5845644b061fa6583178a1a20c8d7bae71e49331b368b41eae8850ff20bff58d85a4ef1781ef81d4ce8e7
SSDEEP

6144:I91x9atY/LKjkz223TEmqJcDSke+qhaR48rXYEKpld:I2Qz73T2QSk6aYEKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b6bda881b82f893174890549cb7e13b

Files

0b6bda881b82f893174890549cb7e13b
.exe windows:4 windows x86 arch:x86

d21ce33d6d59ff49dbee1b139dd1a729

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
LoadLibraryA
LeaveCriticalSection
GetACP
GetCommandLineA
GetEnvironmentStringsW
InterlockedIncrement
CloseHandle
GetTickCount
InterlockedDecrement
UnhandledExceptionFilter
lstrcmpiA
GetVersion
LoadResource
GetConsoleOutputCP
GetEnvironmentStrings
GetStdHandle
GetCurrentThreadId
GetLastError
GetCurrentThread
GetModuleHandleA
GetCurrentProcessId
ExitProcess
VirtualAlloc
lstrlenA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
_strcmpi

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ