6b707664f3ad1c63e365183a1cbdd0b9 | Triage

Sharing

General

Target

6b707664f3ad1c63e365183a1cbdd0b9
Size

374KB
MD5

6b707664f3ad1c63e365183a1cbdd0b9
SHA1

a21468ed9342a4ceb4793f8d2213dcfaddb299cc
SHA256

418a72caa58672c17201ca780e75ebfc3bb3e40895ae2df45b390e8832e97bc7
SHA512

dca20d944c573c6dd1ff430addf3822ab92e3ad3954db9bd2d6c30d9c9e0cd56a2add835ba117781323529392124945a93fcf153b71d1defab710e04e028acac
SSDEEP

6144:FHfA2ur6poND81Iv/ofZ7tEWa0UDINUp8QMpoGeL6Gj5VYfRiS0N4vc4wxg:F/rur6eS1oGBJa04INxF6GexjoEN4vcU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b707664f3ad1c63e365183a1cbdd0b9

Files

6b707664f3ad1c63e365183a1cbdd0b9
.exe windows:4 windows x86 arch:x86

ea085c234268486cca126c514640b0b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
TlsGetValue
CreateFileA
GetConsoleCP
LoadLibraryExA
GlobalUnlock
LocalFree
GetLastError
CloseHandle
FreeEnvironmentStringsA
GetModuleHandleA
LocalLock
Sleep
FindClose
CreateFileMappingA
GetCalendarInfoA
HeapCreate
GetConsoleAliasA
GetACP
FindAtomA

user32

CallWindowProcA
CascadeWindows
DispatchMessageA
CreateDialogParamA
IsWindow
GetIconInfo
GetDC
SetFocus
DrawEdge
DrawTextA
GetDlgItem
DefWindowProcA
GetMessageA
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BERDecSkip
ASN1BERDecCheck
ASN1BEREncLength

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ