6cbc4ed4f7698e74c8ce55408b6d42a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cbc4ed4f7698e74c8ce55408b6d42a9
Size

235KB
MD5

6cbc4ed4f7698e74c8ce55408b6d42a9
SHA1

063b384b22de846f0edd44cde7671c3dfa494119
SHA256

dc0197cc5e5f36f5060d4f4f6c8a2a6540c538d36c30c681b242b666b70c2621
SHA512

7383359ce33b4378ddafcfd7cfd5cfe33e179cd6c8fea021a1846ab859c6573a60c46f8b21459980478ad7c583303292a9577d1b9e57b279eb7870cd92a7404f
SSDEEP

6144:thl/OMUrNQgGTtli5E4o+vzlBn4zwvPOcD9HoA/NkBek:/lLIetlcE4b7j449hfa0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cbc4ed4f7698e74c8ce55408b6d42a9

Files

6cbc4ed4f7698e74c8ce55408b6d42a9
.exe windows:4 windows x86 arch:x86

dc2541c43d13b9d20b839f9b6d7c5b07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

OpenClipboard

gdi32

SetStretchBltMode

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recv

comdlg32

GetFileTitleA

Sections

.text
Size: 224KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE