6cd864997533336df6a0057f66dcd828 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cd864997533336df6a0057f66dcd828
Size

32KB
MD5

6cd864997533336df6a0057f66dcd828
SHA1

9f16f422031f64dfa7c9413784953829704bc807
SHA256

cb7dc6d51b39c5c50b643c8c118fd8a83cd8d6ad4f11c2283f0cce625b0e6bd2
SHA512

8280446d8a4ef1eebeda5cc202a430f1e6ed2aaed025862feb89819728b1f583a1d2c69ab759d1084e3921b42d8bd3f948484127f7e670ca4c218260f9611302
SSDEEP

768:/ABMquw1Xq0smehiaPUIoyIEnkCCgOQEjNFC6MbIHnOKa:0/fXfbeh7UIoyFzhOQi46ewOr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cd864997533336df6a0057f66dcd828

Files

6cd864997533336df6a0057f66dcd828
.exe windows:4 windows x86 arch:x86

ca3414e77b759108ed9b96302cc7c53e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

shell32

ShellExecuteA

wsock32

recv

wininet

InternetOpenA

Sections

.text
Size: 25KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PACKMAN
Size: 664B - Virtual size: 48KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE