6caeb11136de32b2f66948047e507ebd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6caeb11136de32b2f66948047e507ebd
Size

4KB
MD5

6caeb11136de32b2f66948047e507ebd
SHA1

e790ac07c0d5f1766edccdd230aaaaf227914fc0
SHA256

73547368e2dca14f3fe33398992039bc47bcc779ab009cdfc6d94358048e84cb
SHA512

c016ae961475e8310318694f85dee925c418890ba8f7415316d70b288fe8be7c9a77dfe4de5766dfc9dcffdd8b6120f1e6887daebf4e08d805e0b16e9166cc0e
SSDEEP

48:68WeCEtDyCFPhvCBgL931YC1Qn4Rc4TBP1nAMjbhL6e:pBVPB/pQn4Rc4TDnzp6e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6caeb11136de32b2f66948047e507ebd

Files

6caeb11136de32b2f66948047e507ebd
.exe windows:1 windows x86 arch:x86

3e3e1e5abea4352600d8cf00d0008d86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetSystemDirectoryA
CloseHandle
OpenEventA
RtlUnwind
RtlZeroMemory
SetEvent
CreateProcessA

user32

MessageBoxA

crtdll

__GetMainArgs
exit
fclose
fgets
fopen
printf
raise
signal
sprintf

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 224B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 708B - Virtual size: 708B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE