6a0dea5207894c149d4b64a63bdd0298 | Triage

Sharing

General

Target

6a0dea5207894c149d4b64a63bdd0298
Size

112KB
MD5

6a0dea5207894c149d4b64a63bdd0298
SHA1

85f0fec7f808b5cce306a800e8c0353e9aa25dd2
SHA256

6ef9c94fd73a0beb8eebc6b4b09b3c37dc6c8c99b815fbb3d39ddb04b57eedef
SHA512

486f9292b87624a61061e85dd3a8d237309108dd0618bf950d7ea423456f73ff2396b88e6042f575a9d94700e1f395e1a73d77c5120c0cda231fcee3975e88cb
SSDEEP

3072:etGuBfd0yUYl06ZAlzB91zczKuPi5wUuaL0PUVNN:5auPIeua6U9LL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0dea5207894c149d4b64a63bdd0298

Files

6a0dea5207894c149d4b64a63bdd0298
.exe windows:4 windows x86 arch:x86

ca5c67ad6f8f040c3ea3714a4a697980

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SetLastError
LoadLibraryW
lstrlen
GetEnvironmentVariableA
TerminateThread
HeapCreate
GetModuleHandleA
GetACP
IsBadStringPtrW
LocalFree
GlobalUnlock
ReleaseMutex
Sleep
FindResourceA
TlsGetValue
FindClose
CloseHandle
CreateMutexA
PulseEvent

user32

DefWindowProcW
DrawEdge
GetIconInfo
CopyRect
FillRect
SetFocus
DrawMenuBar
CallWindowProcA
GetDlgItem
CheckRadioButton
DispatchMessageA
GetDC
IsWindow

msasn1

ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eyesrkk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE