6b788224d138ef305fd1b422df28ab34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b788224d138ef305fd1b422df28ab34
Size

59KB
MD5

6b788224d138ef305fd1b422df28ab34
SHA1

8da62a270dc466a3a43dc7e298b3d29bbe3ec6b0
SHA256

e459c36cec9f96f2b98a0c42be57351cb1a0b2390fff55307a2dcfdbc17464c2
SHA512

775b31f681986f15be666e95d4906f1bb4a8e141128c6ceef731d34b64dd3aa42a71c268ea1a32c27d7f4edd9bc1d1cd86d8dbb847a759a43a5ade3c13f0d29f
SSDEEP

768:/BStVpZGJqutxJqSd5JBYLG+7+XtcLaqwzwmbFCQ7lzHxiDtbxC3WkuRL:5StfElrB5QatHbFBVxfCL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b788224d138ef305fd1b422df28ab34

Files

6b788224d138ef305fd1b422df28ab34
.exe windows:4 windows x86 arch:x86

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

Sections

.neolite
Size: 18KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.neolite
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.neolite
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE