6d00e15575415a0333bf9c2779719e23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d00e15575415a0333bf9c2779719e23
Size

31KB
MD5

6d00e15575415a0333bf9c2779719e23
SHA1

84cb3c2b95aac8b09cc04894d9d7b2d59de3d448
SHA256

45aa1b87f4e85b226f1f04663622baaacc96c054291663d70f78aa8b3408db39
SHA512

aa246ea94f5a8a86ab469d0d92db5387e5bd33609cec12656e740db8d023cfa6e4263ab672b82a411e7be7aaa39801ae648811822e368182e0d4c0ce38f9110e
SSDEEP

768:ZfIzfXOhlKoLxtCt74y/842kGim5admgS0CX0Mq:eCKoLD+h/84UimkdxMq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d00e15575415a0333bf9c2779719e23

Files

6d00e15575415a0333bf9c2779719e23
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ