6277d56e635ddcbf84e7053a756afd99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6277d56e635ddcbf84e7053a756afd99
Size

698KB
MD5

6277d56e635ddcbf84e7053a756afd99
SHA1

d93a29a01840da4962c2a89e9889794163e56cc5
SHA256

bb159ffed3c1fc8a1c91f1ba71c59a1b03696e5f8f22d7babf4fe06b8d8bd060
SHA512

ce10c466df34bb469b56e09cac66850a29af09ebc55899e7073ae432081e2892068c66339e6d7deecfdcffd6656931a518212420a3a4d6d425463fdf795aa74b
SSDEEP

12288:FuHRLX8b78tZrrJ7EtNDr1OUxJbvj5ykoE9Uf2DNqF:88ysbnbr5A9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6277d56e635ddcbf84e7053a756afd99

Files

6277d56e635ddcbf84e7053a756afd99
.exe windows:4 windows x86 arch:x86

8a42d41f85ff986c73b6a357acbfc120

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
CloseHandle
GetLastError
LocalAlloc
CreateEventA
GetTickCount
GetModuleHandleA
GetVersionExA
lstrcatA

gdi32

MoveToEx
BitBlt
GetTextColor
GetPixel
GetObjectA
GetTextExtentPoint32A
SetBkMode
SetPixel
GetStockObject
CreateSolidBrush
GetDeviceCaps
SelectObject
CreateCompatibleDC
DeleteObject
SetROP2
ExtTextOutA
CreateFontIndirectA
LineTo

Sections

.text
Size: 1024B - Virtual size: 967B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ