6936d498e5cee0bd089e9124b5265ebd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6936d498e5cee0bd089e9124b5265ebd
Size

208KB
MD5

6936d498e5cee0bd089e9124b5265ebd
SHA1

c532067a12dfcd58f582ad1cec1e9ab646606134
SHA256

67e99aa956b9b43f17100b7b82e446204dcf8c1472a2962ffaeb896087603aca
SHA512

0935a8fbe3a3283a15f3f3baf906de30009375af6fda0de94289ee452804d6a4a93175bd0e8544d2c7d94ddbfa846086cf5df6d2efea0d4f9ed9773f49924793
SSDEEP

6144:Dl0n6au1OrZt0nHsZky1SsL3do7Mg/4zbC4swYU5SMRoGWiZw:an6auscqky1rL3dol/UVUU7qGWiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6936d498e5cee0bd089e9124b5265ebd

Files

6936d498e5cee0bd089e9124b5265ebd
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE