6c62865d7d915ecb8091e346d50b6013 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c62865d7d915ecb8091e346d50b6013
Size

1.0MB
MD5

6c62865d7d915ecb8091e346d50b6013
SHA1

7caae900a58bed89fef3316827fefbe1b8c73a69
SHA256

98be2ebce8a4ada4e0db9126ea72dbed83f32fad342266ab975771ec1a236b62
SHA512

2ddc062cbaf2f59bc0448c735783c11a2529b02fc87911ee128145b2aa7a183a89eefd67b91527f7becc324e33370ae45f75123d1e60ce39474d4d5de41e7a85
SSDEEP

24576:S3kNtn5soR54EoduvFGeuRSILPT65lWWMDPQ:Can5soPo4FG59O5XM7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c62865d7d915ecb8091e346d50b6013

Files

6c62865d7d915ecb8091e346d50b6013
.exe windows:4 windows x86 arch:x86

de39c0e9f813ccc714f6f8d2c7253e4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetModuleHandleA
GetTickCount
GetFileSize
GetStartupInfoA
CreateEventA
LocalFree
GlobalAlloc
FreeLibrary
lstrcatA

msvcrt

rand
toupper
__p__commode
__set_app_type
_adjust_fdiv
__CxxFrameHandler
wcschr
_initterm
wcstoul
_exit
__setusermatherr
wcslen
exit
_except_handler3
__p__fmode
memmove
__getmainargs
_c_exit
_XcptFilter

gdi32

CreateSolidBrush
SetBkMode
CreateCompatibleDC
GetTextMetricsA
GetObjectA
GetStockObject
MoveToEx
GetDeviceCaps
GetTextColor
SetROP2
BitBlt

Sections

.text
Size: 1024B - Virtual size: 939B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 479B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1018KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ