60e6b7556616be4c1e5d5696a5351897 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60e6b7556616be4c1e5d5696a5351897
Size

131KB
MD5

60e6b7556616be4c1e5d5696a5351897
SHA1

6c6cc6dbf62bc8244836d3c43802edab728c4cd0
SHA256

4132dc8f8179c5bc69ef8814109164f767e7c63d93c8b3e32727734cab820e6b
SHA512

887364baff52617b0b0478f613581913b1f3d5b467185abb3423895dd1c69d2c9271305b34280df1637fded9a49a295dfaf90bb5c4715a46349c9ce0586988f8
SSDEEP

3072:STv3voYnZrQMlzdZdw8UWoY+/rRfUNtV5wMe2FLCAQu:STv3vvlzdZsWoHWNH5je2FLCAt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60e6b7556616be4c1e5d5696a5351897

Files

60e6b7556616be4c1e5d5696a5351897
.exe windows:4 windows x86 arch:x86

824694e49c2fd877815ac991397ccdda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GlobalUnlock
CloseHandle
CreateMutexA
ReleaseMutex
TlsGetValue
GetCurrentThreadId
SetLastError
GetStdHandle
Sleep
FindResourceA
GetConsoleMode
LocalFree
lstrlen
PulseEvent
TerminateThread
GetModuleHandleA
LoadLibraryExW
SetEnvironmentVariableA
CreateFileA

user32

GetDlgItem
DrawMenuBar
DefWindowProcW
DrawEdge
FillRect
CheckRadioButton
GetDC
SetFocus
CopyRect
DispatchMessageA
GetIconInfo
CallWindowProcA
IsWindow

uxtheme

CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemeBool
DrawThemeIcon

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ