6ae1748a3bb137cc645f962b1c5a93d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ae1748a3bb137cc645f962b1c5a93d7
Size

753KB
MD5

6ae1748a3bb137cc645f962b1c5a93d7
SHA1

6e298f1e215e38de74cb88c7a3e4d6b6187e82af
SHA256

33a3add1626a1389b5c17ef9f2d43f7921164b1110232daef9cd432f05ee99e1
SHA512

697b5dac19f2596a4fc47ff21af0c610809d9333298470e1b84ea7d9f029b90afa6b63b032997cfd9c010083c7a33dcab51b088eefdb06c2be02153d5468358c
SSDEEP

12288:ybbUfgSt+grPMbX5H+B/x0V7wz/Rfck4FZF6giz0EJARiB0Zq8+B5v8Yf:yb2r+g7U+ZldklFCf0ABh7vV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ae1748a3bb137cc645f962b1c5a93d7

Files

6ae1748a3bb137cc645f962b1c5a93d7
.exe windows:4 windows x86 arch:x86

9be4603640c70ec9c8aac6f165b94a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCommandLineW
WriteConsoleA
GetStartupInfoA
HeapDestroy
HeapCreate
ReleaseMutex
OpenEventW
ExitProcess
FindResourceExA
GetEnvironmentVariableW
GetTickCount
SetEvent
OpenThread
SuspendThread
DeleteFileA
CloseHandle
FindClose
GetFileAttributesA
CloseHandle

user32

GetSysColor
FindWindowA
GetWindowLongA
GetIconInfo
DispatchMessageA
IsZoomed
GetClassInfoA
GetKeyState
SetFocus
PeekMessageA
CallWindowProcW
CreateIcon
DispatchMessageA

htui

HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ