6c87343a57fb941eefe8732a47a0fa6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c87343a57fb941eefe8732a47a0fa6d
Size

170KB
MD5

6c87343a57fb941eefe8732a47a0fa6d
SHA1

8b808e9afee4135f2a124db25ef5abf1c7d62d33
SHA256

6a2adefe6aea3151cfdf0561663d1010736ae904e5a7895155910a4ded86cb3a
SHA512

c0684014cf5c864bb6b1eec32fd90b5ef56fcae2bb9ff0df92ffd90201f326d9ac66ae5253fb109da0fc2989a5811b71cf7b817b6947dac1d2a2eebf1fcdcff3
SSDEEP

3072:Gxy0Q1lICXqPuP/9mmWOUhh7p0EZc9ZgZYZkdKtUOOJ5+nRMEfS0:Gx3CkuPVm+u0k6TBUsRMqS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c87343a57fb941eefe8732a47a0fa6d

Files

6c87343a57fb941eefe8732a47a0fa6d
.exe windows:5 windows x86 arch:x86

5ef3fdb415f3c7918f1403e59e2c0fd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ord29
PathCompactPathExA
StrCmpNIW

kernel32

lstrlenW
GetModuleHandleW
GetWindowsDirectoryA

Exports

Exports

?SetupReference2@[SXH_KK]V
?SetupReference@[SXH_KK]V

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.piano
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ