6b01a68c7f017cd9fc8e636a4549f5fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b01a68c7f017cd9fc8e636a4549f5fb
Size

429KB
MD5

6b01a68c7f017cd9fc8e636a4549f5fb
SHA1

5a5452dc5d30c0551ef931a42adf5fabfaf386b1
SHA256

e994a0547c6b5bfa515a04a3de8d9cfa95bb06017707ce5c573fa83c6a1a20fa
SHA512

68a7215217ca663b317a8bce7bd5b56392ec220c66e102b03e7c41729c3ce32d58958d5146376e0c93df4812cc75338da564936693a790a2b287f147f6501403
SSDEEP

12288:ruK/PYemT73pXOpCOzmMc7BIPZ9KlePAtw1M:ruK/wemT9k26elNuW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b01a68c7f017cd9fc8e636a4549f5fb

Files

6b01a68c7f017cd9fc8e636a4549f5fb
.exe windows:5 windows x86 arch:x86

05ccb036ee828bffcc9258ab45bc733a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
GetFileTime
FormatMessageW
InterlockedIncrement
LZDone
SetCurrentDirectoryW
GetACP

user32

FindWindowW
GetWindowTextW
PeekMessageW
TranslateMessage
EnableWindow

gdi32

BitBlt
GetDIBits
ResetDCW
PlayEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
StretchBlt
SelectPalette
CreateHalftonePalette
GetDIBColorTable
SelectObject
SetBitmapBits
CreateBitmap
CreateCompatibleDC
GetObjectW
DeleteObject
GetDeviceCaps
GetBkColor

msimg32

TransparentBlt

shlwapi

PathAddBackslashW
PathFindExtensionW
PathRemoveFileSpecW
PathCompactPathExW
PathRemoveExtensionW

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ