6a183820b1a1a0d6b48cb5d30dc22100 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a183820b1a1a0d6b48cb5d30dc22100
Size

318KB
MD5

6a183820b1a1a0d6b48cb5d30dc22100
SHA1

1dba69ce2fe7523e0768c6af28c165ec2f55527e
SHA256

7564094d41b7be4dee58e9d3f44b9b746d3cdca638ba70596b485a01d0a182d0
SHA512

837d0de66a489a7ce25e5bc0e752fc0c21359d5cdbbb188ad00793d4cc99f4b26f779817c54e3066a9bdfcc9562360797f1145ab33c8abe7dd44d97f2a4c9044
SSDEEP

6144:acM9fK24PeRjaiWlghH2t1YYNtUhMAt4/2iO65GWORD7F5F3vtXKSTf3aX:acCfj425aiW+2TYYzUhM24Oi75GWaD7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a183820b1a1a0d6b48cb5d30dc22100

Files

6a183820b1a1a0d6b48cb5d30dc22100
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

odaqhvqhekls
tjsjqimpax
wjfmiaxvnupmt

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ