2606f1273fe7ac4463c56d72a730df79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2606f1273fe7ac4463c56d72a730df79
Size

692KB
MD5

2606f1273fe7ac4463c56d72a730df79
SHA1

4d3eeb75cf5ff34608138c46fec280a8c4e3e1fe
SHA256

73fe367adb042fac7d0610181082369ee03d7f11d6a4cf1c91a41c516c0a8f44
SHA512

1b4ec610f3e85d0710a0ee85bf09e73fad87c7ddbff498b5d1260c96262e14368b45e6fc8eb6b1a8b204b6491bba51947cf0bbb52775b7ac51e89e3efff96eae
SSDEEP

12288:hWyr95RP6oiHkFk2QJBzY/buebkjT2LxwkOeM+dN4LucQBvNpUmDjGF11+Eee7cP:oyr9/rdy2MTOLABnjBopfJ9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2606f1273fe7ac4463c56d72a730df79

Files

2606f1273fe7ac4463c56d72a730df79
.exe windows:4 windows x86 arch:x86

629ad41be39f461e18cbe1ca0a03a465

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
FreeLibrary

user32

GetMessageA
BeginPaint
GetFocus
EndPaint
DispatchMessageA
DefWindowProcA
GetSysColor
SetFocus
ScreenToClient
LoadIconA
ShowWindow
SetWindowTextA
DestroyWindow
CreateWindowExA
GetClientRect

msvcrt

wcschr
_controlfp
__p__commode
_acmdln
memmove
wcslen
_XcptFilter
toupper
_exit
__setusermatherr
__CxxFrameHandler
__getmainargs
rand
__set_app_type

gdi32

CreateFontIndirectA
SetBkMode
SelectObject
GetTextMetricsA
LineTo
SetPixel
GetTextColor
GetTextExtentPoint32A
PatBlt
DeleteObject
CreateCompatibleDC
ExtTextOutA

Sections

.text
Size: 1024B - Virtual size: 943B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 686KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ