600d5cf140d9e30816f0e44cb7b04f8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

600d5cf140d9e30816f0e44cb7b04f8f
Size

128KB
MD5

600d5cf140d9e30816f0e44cb7b04f8f
SHA1

4ee40ae1583c8e5e936af3015c95d22fd11c22ff
SHA256

6b5abf11b56b2a95e5e97d8cd8fa74aed743a436a81807e3c3168752697a43d0
SHA512

311898c81d58e31d1d40f81e882ca8570d0ad593d4b24b497157bba48077deb57c02069310a989228688ae603c767d66b9c3a03f913dd675178e4352e78a3b2f
SSDEEP

3072:DkETRHXQiquMqi5nb1kqzG3UBlXSnhN8c0vw3u3:DPRXQiZFi5NFBlDco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
600d5cf140d9e30816f0e44cb7b04f8f

Files

600d5cf140d9e30816f0e44cb7b04f8f
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE