6086b046d4e6dbc8a14414f0f6cf0052 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6086b046d4e6dbc8a14414f0f6cf0052
Size

209KB
MD5

6086b046d4e6dbc8a14414f0f6cf0052
SHA1

fa4d5839946f1b0245d2d6ee78fd10067b4eb6f3
SHA256

4bff110ed3b2e286f4cf01280a0f9ad4f03a4f0454caad07feb3dd294d22c544
SHA512

0c17f41d8067ccd537a0d1ea20df9592dee6b1775be0f1e88d73385bf819324a6f4ea1c3e7fa0abd275073414d92449702f91e8bfcce51b1912def22e10d9279
SSDEEP

3072:6lUz9nf7LA+jvzSbuiJAJM2wbo1oDSoLczchQ7mhcNLbO+2Wtm6pZBKnLZKOVdR9:6lUzJ/jcSXcLwSeQ+2fCMBl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6086b046d4e6dbc8a14414f0f6cf0052

Files

6086b046d4e6dbc8a14414f0f6cf0052
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE