6006f40490dda08559270d65f4690819 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6006f40490dda08559270d65f4690819
Size

813KB
MD5

6006f40490dda08559270d65f4690819
SHA1

54e1965dacd9bf8ce50ed19bdf729108638ab904
SHA256

c6ea08c589045622be572cc27aac3365423f18aa478d2eb9bf92c1d58cd21454
SHA512

7f1a08618e8c2b532ac0d5970aac61959c1d6ecbfcb81bf81500914541879657f35a008c6a5076e843e8571f87db81da4cea646a06015f5c26a05a566ed09f44
SSDEEP

24576:SCRUnm6xB6gOZPkRK4vLYqKjuRReLtHm56fYE:VeSgOdv2YseLrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6006f40490dda08559270d65f4690819

Files

6006f40490dda08559270d65f4690819
.exe windows:5 windows x86 arch:x86

67e20cf739413f1d05ef1cce73e97c86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shlwapi

ColorAdjustLuma

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 793KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ