6807d22f32db398b057d9ee7f875cf46 | Triage

Sharing

General

Target

6807d22f32db398b057d9ee7f875cf46
Size

78KB
MD5

6807d22f32db398b057d9ee7f875cf46
SHA1

1408341d9fdca2c62a97ea135a2020b96794aa32
SHA256

a6d19112bcc8b9291f480fbbd1cdd57f98f06a3a83b4ba8b39b45b82a0a08cd5
SHA512

5c2f2934b36f9ea4a0e28e36df8071889923e4ffc23eefd0ee756c025ea6d0bba5dccc3c663e1d697c0d796976de92ffba7ce81035b12e4a1bd2c0028e74f7f0
SSDEEP

1536:PmkgRjKOPM82q2qstg4QeV/EVWUXLNjUYphlP:PmV3Pz2fgneV8tXp9jZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6807d22f32db398b057d9ee7f875cf46

Files

6807d22f32db398b057d9ee7f875cf46
.exe windows:5 windows x86 arch:x86

3b5ba0c1a026aa9aca8bc16267d62ad0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetTickCount
GetProcAddress
VirtualProtect
IsBadReadPtr
lstrcmpiA
LoadLibraryA
VirtualAlloc
GetModuleHandleA
CreateThread

user32

LoadIconA
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassExA
LoadCursorA
DefWindowProcA
SetTimer
KillTimer

Exports

Exports

sfgsdfsdfs
sfsdfsfsdf
start

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 687B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ