6bc5e9fbb178d7d735c464e191762de1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bc5e9fbb178d7d735c464e191762de1
Size

148KB
MD5

6bc5e9fbb178d7d735c464e191762de1
SHA1

e3225b7f2daa745b61d3b632ab681ce6b79a03b5
SHA256

1a5844c0f01bf92b2732c764d6830dbba1084b72a5a7a2d4b607434575d8a736
SHA512

0dd9674ef060b442846ca8e3a0d333ec8e14817d7658c56c840e053842543189873eb81977cfc311a1b27354032aebfb6b660060449b817a9ca00e3691ac89d7
SSDEEP

3072:YtlqyXvd3ND7643FOUF9j0tSIMNCyk45p59XUfvtxJnd10mhGXbL:gZ5j0tRMlAb50mMrL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bc5e9fbb178d7d735c464e191762de1

Files

6bc5e9fbb178d7d735c464e191762de1
.exe windows:5 windows x86 arch:x86

c8e09844fc724daffa923feac8f68993

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripPathA
StrToIntA

kernel32

lstrcmpA
lstrlenW
lstrcpyA
LoadLibraryExA
GetModuleHandleA

Exports

Exports

?CreateDefaultHandler@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?EntropyFail@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?SetIosHandler@567GPAUHINSTANCE__@@U_COMMPROP@@?F

Sections

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ