6180c219b0db36640566e6994e34611c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6180c219b0db36640566e6994e34611c
Size

36KB
MD5

6180c219b0db36640566e6994e34611c
SHA1

b19fec5c5183a0031056b47e6f564d10be7fd996
SHA256

4605c2b9383df0954000573c802e16ff8826eebaf08d4b8cfbc59999b15a714a
SHA512

0572f524d5fc01c5d0fb67d7b3a513ed7539237b24e3a010b4cdcb7899b6f6e3563e223d5dedeab52c972a1452a0b14c9c78c745a9cc1aa8e0f61b59f506d3c9
SSDEEP

768:L5uhMogHxJ5CVpm6jFHd+mc+8MfIsVNwDhqpsqv:9FoglCVBjdqz9NwpH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6180c219b0db36640566e6994e34611c

Files

6180c219b0db36640566e6994e34611c
.exe windows:4 windows x86 arch:x86

14e041397421e00d937c2985286236a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

wsprintfA
IsZoomed
RegisterClassA
GetTopWindow

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE