6a09d8e8877d3dec32294204b606a2dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a09d8e8877d3dec32294204b606a2dc
Size

35KB
MD5

6a09d8e8877d3dec32294204b606a2dc
SHA1

a5e820d432c7a92e1792962d51bc80e6ff2d5ef3
SHA256

55e591cbce2500caf2468c2a43181a5f793c968136869faf0542bc04844ca2e3
SHA512

5daf9da620292a8bd47b73e5629deb6e09bec675602ae08f26008b4c6c545fe212a608d8034d0cc6d635ed03aa37532690424c583cdbd7c72ad5860254ee778d
SSDEEP

768:AeSLHZyOB6rDu4kq1QEqMVvCVMkyFNjvb:ApZyY6zk4fqMVCVMFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a09d8e8877d3dec32294204b606a2dc

Files

6a09d8e8877d3dec32294204b606a2dc
.exe windows:6 windows x86 arch:x86

9ef39e4cc5608d2d2c53a7baa5c1c900

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hnnauzg
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE