6b6b076bbcb072e44673342e76444163 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b6b076bbcb072e44673342e76444163
Size

5KB
MD5

6b6b076bbcb072e44673342e76444163
SHA1

5e51b76bdb512a70f92ec76b27b17694e53b5ed1
SHA256

9d797168c949476a35d442fc0165f0feabbbdb31455ea495e37fc866ee27916a
SHA512

7f9f1b31f807ac4e12f2193faf24186936c5adc5087e90c458d144f427b9e683dee6de10da8f34819ef8daaca0e9d4b716f9d532604641d19e86bf9324972765
SSDEEP

96:EbUdhiY/VTnEvbJiTSNh7FPtboynw2rxprySFxyS:t3fTm/5P1oynwMxbx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b6b076bbcb072e44673342e76444163

Files

6b6b076bbcb072e44673342e76444163
.exe windows:4 windows x86 arch:x86

c8b15ae6c3d571e4af46ae54408db83a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord941
ord5353
ord5356
ord5808
ord1075
ord5204
ord3229
ord690
ord389
ord540
ord800
ord922
ord537
ord354
ord5186
ord6385
ord665
ord1979
ord1228

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_EH_prolog
fopen
fseek
fread
__CxxFrameHandler

kernel32

GetTempPathA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
WinExec

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ