6851c968092a501d88ced911c34deb09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6851c968092a501d88ced911c34deb09
Size

20KB
MD5

6851c968092a501d88ced911c34deb09
SHA1

21cbeb814a04bc5f56c04824bee28c36e2b02cf2
SHA256

e44969c2da103fce47ce741c09c405d29e352e60c67ef70c840fc8e2d36fcb5a
SHA512

e74f275aace3c4182e74bdcb8a230748a26e3071a2b771246944af9bce4293bd8f586b88a464c9f87ae896f3883aa370e00a198749afe4d4c6b7f8c99c089151
SSDEEP

96:vfbIyqQMfsqqu593O9DF1X41ivRk2Xo/Z0QFSq9kkPPaCuLMgW5C8f9eOs:vTIdDfsqqu5ebJk2XcCq95CC8MgiCj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6851c968092a501d88ced911c34deb09

Files

6851c968092a501d88ced911c34deb09
.exe windows:4 windows x86 arch:x86

deb04659ca3a596b81501081ad9d0327

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

strstr
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__CxxFrameHandler
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
atoi
free
malloc
_exit
__setusermatherr
_stricmp

ole32

CoCreateInstance
CoInitialize
CoUninitialize

kernel32

MultiByteToWideChar
DeleteFileA
FindFirstFileA
GetStartupInfoA
GetModuleHandleA

user32

GetSystemMetrics
CharNextA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE