6c98b168116213b1262500f1857382d5 | Triage

Sharing

General

Target

6c98b168116213b1262500f1857382d5
Size

42KB
MD5

6c98b168116213b1262500f1857382d5
SHA1

57c8f43795ba101d8e0b6f7cbe3802635f8fafa7
SHA256

08fff83888632122611c5f6ed80b613b388138e225f73c02ba69c421217d661e
SHA512

43993ebc53fca6d49a08b1d37bd0728fa3750a722c5450085d2500c9e37c0d4a4d959944aa8cc56e61efba4fe7ca9dbdc74ec74166c8c4d7266357eb08bb2dba
SSDEEP

768:OaFOR6jurbV/nVx1Z7LY5RU/SRHAH/igUmVlWcjRi8StOBoPXyAwDSBemuy6NHmK:OOOrWvngUmVlWcSEsXygBemuy6hYGJYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c98b168116213b1262500f1857382d5

Files

6c98b168116213b1262500f1857382d5
.exe windows:4 windows x86 arch:x86

792229af2bcea1244f5950fc50e02464

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
CreateNamedPipeA
GetExitCodeProcess
HeapCreate
LeaveCriticalSection
lstrcpyn
TermsrvAppInstallMode
GetStartupInfoA
GetProfileSectionA
GetProfileIntA
GetConsoleAliasExesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE