6ba9c3c1a9eca400ec12f21d76718727 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ba9c3c1a9eca400ec12f21d76718727
Size

21KB
MD5

6ba9c3c1a9eca400ec12f21d76718727
SHA1

e226c694a181f38b0c2161836a162647360b81ad
SHA256

711d9170dd55e38f804d25ce0942331462f17006382d8d3086c96064b09907d7
SHA512

e6626b4f83cb2814d5b50806a30dcef6d7dbcd5cbf1ea62a72833b7b032d55a51786dbcaa11f54c2ab8e0d9fff2fb4a77c1086e477d85f257be3d83703b46343
SSDEEP

384:oOYlctzqioo9gRfFwHrNgTcWpzh3I7EEBYMm9my7/+TLBPrEwg6:ClctWi8RfFwHrOTfpzh35EBYDj70BPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ba9c3c1a9eca400ec12f21d76718727

Files

6ba9c3c1a9eca400ec12f21d76718727
.exe windows:4 windows x86 arch:x86

96e0b642e7a1dd790f5d01b43e97db27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
ExitThread
FreeLibrary
GetComputerNameA
GetDriveTypeA
GetLogicalDrives
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetTempFileNameA
GetTempPathA
CreateThread
DeviceIoControl
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
CloseHandle
SetFileAttributesA
SetFilePointer
Sleep
WaitForSingleObject
WriteFile
WritePrivateProfileStringA
CompareStringA
CreateFileA
CreateEventA
GetTickCount
GetVersionExA
ReadFile

user32

GetMessageA
PostQuitMessage
RegisterClassA
SendMessageA
TranslateMessage
PostMessageA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CharUpperA

advapi32

RegCloseKey
RegEnumKeyExA
GetUserNameA
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE