6714a1d3f536fb7cef7b19265fc9f883 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6714a1d3f536fb7cef7b19265fc9f883
Size

311KB
MD5

6714a1d3f536fb7cef7b19265fc9f883
SHA1

9e9e3e91d577e919734894d1a8f44631c036b436
SHA256

e00b0284a3b81ca67d866515db4c3453e66c44422e7f2c9410afc2ccb4e191cf
SHA512

a2d3abf628d4291d7273cdf3f06fb84a8286dce488d0686288de5f642fdd84954829d462535a049883861f77c11634eee20d88a7cc205c4efbbf99f93eaa4996
SSDEEP

6144:3PB4U8SZ6FFZGjaCLoOAG99sAEa4LZtz5ft13ZC11b2+Lh+679+y7Ul/WtBB+Wxa:3KjCmFLCLXiAMN5l1k11b225l7Uy+U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6714a1d3f536fb7cef7b19265fc9f883

Files

6714a1d3f536fb7cef7b19265fc9f883
.exe windows:4 windows x86 arch:x86

2dbd408b66cec399664cedd7eac988de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GetSystemDirectoryA
InterlockedExchange
CloseHandle
RaiseException
ReleaseMutex
HeapCreate
GetLogicalDrives
GetLocaleInfoA
Sleep
GetACP
VirtualProtect
GetCommandLineA
FindFirstFileA
GetLastError
GetStdHandle
EnterCriticalSection
SetEvent
ResetEvent
SetErrorMode
LoadLibraryExA

user32

GetFocus
IsIconic
GetParent
FillRect
EndPaint
ShowWindow
GetCursorPos
ReleaseDC
GetActiveWindow
GetWindow
FrameRect
GetWindowTextA
ValidateRect
FlashWindowEx
SetForegroundWindow
wsprintfA
BeginPaint
GetClassNameA
DrawTextA

httpapi

HttpInitialize
HttpAddUrl
HttpTerminate
HttpCreateHttpHandle
HttpAddFragmentToCache

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ